Hi there,

I would like to ask for your help. We have been using an old version of openVPN for a long time (v2.2.2.). It worked fine but we wanted to streamline the versions and upgraded to 2.3.7. which is the last version that works with the substandard file server we have. Uninstalled the previous version, restarted the computer, then installed the 2.3.7. I603 for 64-bit system. Then when I tried to start the app from the bin folder, it said that the GUI was not found or running and pointed to the registry. I checked the registry editor and found no OpenVPN GUI folder... I unistalled and reinstalled and same issue. On my own computer it worked fine when I did it in 2021. What did I do wrong now? Thank you!

registry editor

version I used for the recent unsuccessful install for a Win 10 64-bit system

I was able to install OpenVPN Access Server via Helm Chart on my K8S cluster.
Is it good practice to make the service available via my HTTPS ingress? What would be the recommended way in a K8S cluster setup?

I currently have set up a VPN to grant me access to some automation devices remotely. Initially I had been using it with an Android device (Redmi note pro+ 5G) and it works pretty fine. I have a ping of about 200ms approximately with the remote devices, and considering the delay with my windows computer it's acceptable.

The issue is that now I'm trying to set it up on an iphone, and I'm not very familiar with the operating system of apple. The VPN is fully set up and connects after a while, but once it is connected and I try to remotely access the systems, the connection is really slow and unstable.

Added to that, I'm not very knowledgeable about VPN network management, but I'm willing to learn since is something I do for my job so I kinda consider it as work formation.

Have you guys experienced this issue? We access the devices via web browser, and in the Iphone device I tried to access with opera browser and chrome. Is it possible that the issue is due to the browser? Do you know some iphone browser better suited for my use? I'm assuming maybe the issue comes from some limitation on the iphone system against my VPN. The only special configuration I made for the app is to allow insecure connections, and as far as I know iphone devices have much tighter security configurations, so maybe it comes from there.

Let me know if you experienced this issue and if you managed to solve it somehow.

?

I'm running OpenVPN on my Synology NAS and have no problem with a remote client connecting to the Synology and then accessing my local LAN devices.

However.... I can't get the reverse to work; i.e. my local LAN devices can't see the remote device.

The subnet (is that the correct term?) for my primary LAN is 192.168.1.x. OpenVPN assigns IP addresses in the 10.8.0.x range. I assume I am missing a parameter somewhere... but as a network novice, I'm a bit stuck.

Any suggestions?

Thanks!

Downloaded the hyperv image setup following guide chose default for everything can't log in too the admin ui using openvpn user tried fresh changes too user admin can't log in using that either

Running passwd openvpn or Running passwd admin

Says user does not exist

I've been using the OpenVPN Connect app in MBP 14" with 15.1.1 System. Its been like two weeks the app is not functioning. Getting this error, I've tried uninstall and reinstall many times. The OpenVPN profiles are fine, as tested in Tunnelblick app and iOS verion of OpenVPN app. How can i fix this?

https://preview.redd.it/nihgpayjvk3e1.png?width=800&format=png&auto=webp&s=2a13ca0748a93b345d6863e8250fd3a4fff16841

just installed Open VPN (Play store) on my Shield. Put the ovpn file in the download folder, clicked on import, using File commander to browse... the OVPN file is greyed out and I cannot select it. Open VPN has storage permissions, I just allowed them. File Commander also. Am I missing something? Thank you!

Hi, i have this NAS for a year and i am using it for video editing across the country. I dont know what happened with my connection with OpenVPN.

This is my configuration:

Quickconnect is enabled

• DDNS is configured with the ip adress of the NAS, on LAN 1.

• LAN 1 is the ip of the NAS (DHCP)

• The firewall is enabled with 2 rules

First rule

• Ports, i checked “VPN Server” with my port
• Source IP “All”
• Action “Allow”

Second rule

• Ports “All”
• Source IP “Specific IP” (subnet is selected, the ip adress is 10.8.0.0, subnet mask 255.255.255.0
• Action Allow

• I dont know if i need to have this, or if this is the problem, i have 3 certificates

• MYNAS.synology.me
• MYNAS.direct.quickconnect.to
• “synology”

• In the VPN server app at general settings

• Network interface “LAN 1”
• Account type “Local users
• Grant VPN permission to newly added local users✅

• In the privilege tab

• All the users have access to to OpenVPN

• In the OpenVPN tab

• dynamic ip adress to 10.8.0.1 (default)
• maximum connection number 5
• maximum connections of an account 3
• port 1194 (default)
• Protocol UDP
• Encryption Auto
• Authentication SHA512 (default)
• Mssfix option value 1450
• Enable compression on the VPN link ✅
• Allow clients to access server s LAN ✅
• Verify TSL authentication key ✅
• Verify server CN ❌
• Enable IPv6 server mode ❌

• As router i have a tp link archer a8 I went to NAT forwarding -> Port forwarding, added a the next configuration:

• Service name “MYNAS.synology.me”
• Device ip adress “192.168.0.111”
• external port “1194”
• internal port “1194”
• protocol “UDP”

I ve exported the configuration from openvpn, changed the remote “YOUR_SERVER_IP” to MYNAS.synology.me Saved it and droped it in the openvpn app on a different network pc, typed my username and passwork and the connection fails “connection timeout”

I dont know what the problem is…i tried for days and no success..

Hello everyone,

I have a Ubuntu server 24.04 LTS running Openvpn and Stunnel for obsufication in my school's highly restrictive internet. For example, in Roblox, the games randomly disconnect but the VPN client is still connected with a stable connection. I suspect that this may be a MTU issue or packet loss, but I am not highly certain. I've tried changing the mtu by adding:

tun-mtu 1420
mssfix 1380

on both the server and the client, which increased the latency yet did not fully resolve the situation. I've ran cloudflare speed tests which included packet loss tests and has reported 1000/1000 packets successfully sent, but still results in random disconnections in almost every game. Below are my openvpn server and client configurations:

port 1443
proto tcp
dev tun
tun-mtu 1450
mssfix 1410
user nobody
group nogroup
persist-key
persist-tun
keepalive 10 120
topology subnet
server 10.8.0.0 255.255.255.0
push "route 192.168.1.0 255.255.255.0"
ifconfig-pool-persist ipp.txt
push "dhcp-option DNS 192.168.1.127"
push "redirect-gateway def1 bypass-dhcp"
dh none
ecdh-curve prime256v1
tls-crypt tls-crypt.key
crl-verify crl.pem
ca ca.crt
cert server_6x9Z2dB7UE0eGE7A.crt
key server_6x9Z2dB7UE0eGE7A.key
auth SHA256
cipher AES-256-GCM
ncp-ciphers AES-256-GCM
tls-server
tls-version-min 1.2
tls-cipher TLS-ECDHE-ECDSA-WITH-AES-256-GCM-SHA384
client-config-dir /etc/openvpn/ccd
status /var/log/openvpn/status.log
verb 3

Client config:

client
proto tcp-client
remote  1443
dev tun
tun-mtu 1450
mssfix 1410
resolv-retry infinite
nobind
persist-key
persist-tun
remote-cert-tls server
verify-x509-name server_qs2L2DYUaw22IfhA name
auth SHA256
auth-nocache
cipher AES-256-GCM
tls-client
tls-version-min 1.2
tls-cipher TLS-ECDHE-ECDSA-WITH-AES-256-GCM-SHA384
ignore-unknown-option block-outside-dns
setenv opt block-outside-dns # Prevent Windows 10 DNS leak
verb 3127.0.0.1

When calculating the most optimal packet loss, I've seen people ping their vpn server with "ping www.yahoo.com -f -l 1492 ", with 1492 the mtu. So do they ping it with the server and client mtu specificly set or default?

Thank you, any help will be kindly appreciated!

I have a work network with an OpenVPN server (on a TP Link Omada router). It exports an ovpn file for me:

client
dev tun
proto udp
float
nobind
cipher AES-128-CBC
comp-lzo no
resolv-retry infinite
persist-key
auth-user-pass
explicit-exit-notify
remote vpn.mydomain.com 1194
<ca>
-----BEGIN CERTIFICATE-----
...
-----END CERTIFICATE-----
</ca>
<cert>
-----BEGIN CERTIFICATE-----
...
-----END CERTIFICATE-----
</cert>
<key>
-----BEGIN PRIVATE KEY-----
...
-----END PRIVATE KEY-----
</key>

I have Android mobile devices running the OpenVPN Connect app, and I have imported the above .ovpn file as a profile in this application. I have it in an "always-on" configuration so that the VPN is always used on public networks (hard requirement).

The problem I'm having is that when the Android devices are on a WiFi network in the office, they cannot access anything. I believe this is due to the egress IP being the same as the VPN IP (loopback). Even if this wasn't an issue (separate IPs), I'd much prefer to not use the VPN when the device is directly on the work network, as it's not needed.

So, my question is: is there any way to configure this setup so that the VPN on the Android devices is disabled (or enabled but doesn't route any traffic through it) when the device is on a specific network? Whether that be a specific WiFi SSID, or subnet, etc.

Alright, so my wan connection is 1gbps down and 50mbps up. So I know the theoretical max of vpn is 50mbps. However, I am only getting 10mbps both ways.

About 2 weeks ago I could get the 40-45mbps both ways. The things that have changed:

• i updated opnsense to the newest release
• bought and connected a domain to opnsense
• reinstalled certs for the new domain

Things that I have tried:

• changed from udp to tcp, which seems to have fixed it on the local network, but same speed from remote locations like work
• removing all encryption.
• building a test server from scratch

Things to note:

• this is my home build
• in the connect app I see that server suggest link mtu as 1587 with tun mtu as 1500. Client agrees with 1500 mtu

-not using compression -using the server (legacy) version, I had issues with the instances version, but might revisit

Please let me know what you think, and if you need any additional info.

Problem Description: I’m trying to connect to an OpenVPN server using a .ovpn configuration file, but I receive the following error:
authentication failure.
Additionally, the connection seems to get stuck during the download process and never completes. I’ve verified the password and it seems correct, but the issue persists. I’m using OpenVPN on [OS name/distribution] and have followed these steps:

1. I downloaded the .ovpn file from [source].
2. I configured the credentials correctly (or with an auth-user-pass file).
3. I’m using the following command: sudo openvpn --config file.ovpn

What I've already tried:

• Verified that the credentials are correct.

• Tried using sudo -i to ensure I have root privileges.

• Checked OpenVPN logs for more details, but couldn't find anything helpful.

• Waited for the download to complete, but it remains stuck.

• Tried adding a route using the command: sudo ip route add 10.10.14.0/24 dev tun0 The route was added successfully, but the connection still gets stuck.

• I am using OpenVPN latest version.

• Any suggestions or solutions? Thanks in advance!

I’m using OpenVPN client and VPN sever from vpngate, it is working fine on my iPad and iPhone but on my Macbook, it said connect but the connection is not routing through the vpn server.

Anyway to fix this (I’m just a basic and don’t really know what I need to fix 🥲)

Thank you in advance

Trying to setup OpenVPN with this outube tutorial: https://www.youtube.com/watch?v=1dIy0rZ_GKs&t=241s

https://preview.redd.it/lux9a5y0hm2e1.png?width=1920&format=png&auto=webp&s=8a4decf8e4ca4b0ebd129b281bbfe6686e06612f

https://preview.redd.it/zwkr46y0hm2e1.png?width=1920&format=png&auto=webp&s=65a64b133d90bee47c376b9b32d777036179e530

Hello!

First of all I would like to point that this whole setup is not mine idea, I am aware that Windows 11 Pro is not meant to be server OS and I don't want to do this but I was told to set up OpenVPN in this configuration this despite lack of common sense.

So here I am, trying to setup an OpenVPN server on mentioned Windows 11 Pro laptop as an entrance point into company network. Please, don't tell me how this shouldn't run on a W11Pro laptop but on router or NAS in the network - I know that.

I got it up and running, I can access the server itself and devices in its LAN. However, there is an issue:

To get this working I had to setup ICS in Windows (network sharing between local ethernet and "OpenVPN TAP-Windows6" adapter). It works perfect as long as I don't reboot the machine... After reboot the ICS is broken and no longer works so I loose access to server's LAN from the outside.

I know that this is not a new issue:

https://forums.openvpn.net/viewtopic.php?t=33273

https://forums.openvpn.net/viewtopic.php?t=31321

However, the solution posted here doesn't work (anymore? in my case?) - I've got the parameter in regedit, I've got the automatic start of ICS service. However, I still cannot access server's LAN as long as I don't execute following procedure:

1. Start OpenVPN Server
2. Disable ICS on Ethernet, apply
3. Enable ICS on Ethernet, choose TAP-Windows6 adapter, apply
4. Stop OpenVPN Server
5. Start OpenVPN Server

Do you possible have any idea better than setting up some crazy Powershell script to perform this action automatically on startup?

I have a windows 7 virtual machine with OPENVPN that ive been using for years without issue on my home internet. I recently travelled though and get this error: "error calling protect () method on socket" when attempting to connect OpenVPN using my cellphone as a data hotspot.

Online searches said to change the APN to IPV4 only which I attempted to do but this did not fix it.

I also went to a local library and connected to their wifi to see if OPENVPN would work then, same error.

Any idea whats going on or how to fix this?

Hello,
I'd like to start by saying that I’m a complete beginner when it comes to networking and PCs. I had this idea in mind, and it took me three weeks to figure everything out. I’d like to share my experience for others like me who might be struggling.

I was following this guide on how to set up a VPN on windows : https://www.youtube.com/watch?app=desktop&v=iW87TiAP85s
No matter what I did (I erased everything and started over every day, sometimes with small modifications), I could connect to the VPN server, but the client had no internet connection.

The problem turned out to be the OpenVPN TAP-Windows6 adapter, which you need to share internet access with your main adapter. It wasn’t configured properly—it had a random IP, mask, and DNS. To fix this, I simply set everything to automatic mode. Once I did this, a proper configuration appeared after turning it off and back on.

Secondly, you absolutely need to add a rule in your router (or box, in my case). You can use the NAT/PAT or Forwarding option to allow UDP/TCP protocols on port 1194, both inbound and outbound, for your "server." You can use either its IP address or its hostname.

During my research, I noticed that many people faced the same issue I did: being able to connect to the VPN but having no internet access. I don’t know if you’re dealing with the same problem, but I hope this helps.

One significant drawback of Shadow PC for me is that it doesn’t have a fixed IP. Since they’re hosted in the OVH datacenter, many websites and apps treat them as VPNs or proxies. OpenVPN is a good solution to "fix" your IP, but I was wondering:

Since Shadow PC also uses IPv6, is it possible to route UDP protocols over IPv6 to the same server? This way, I could have both a fixed IPv4 and IPv6. From what I understand, with my current configuration, all IPv4 traffic goes through my VPN using UDP, but the Shadow PC still uses its IPv6. Would this cause any issues?

Hello All,

I have a friend who spends a lot of time overseas. Occasionally he needs to connect through a Canadian IP address and I want to give him a means to do this. I also want to connect to my home network when I'm away from home.

I have an OpenVPN AS that I want to setup in this way where his profile will allow him to redirect his gateway through my network and pop out here but not have access to my internal setup. I want to allow my user to access my internal network resources.

Does anyone know how I might go about this?

TIA!

Hello everyone,

I've been using OpenVPN with the latest version of Ventura for months without any issues but a few days ago, I had to install LuLu firewall and, since then, I can no longer connect to VPN networks. I have permanently allowed the petitions made by OpenVPN in LuLu (I think there were just two) but the problem persists. Am I missing something?

When it comes to other apps, LuLu seems to behave just fine.

Thank you 🙏

I have a problem connecting with any vpn servers on openvpn or ovpnspider and I don’t know why . Anybody to help me ?

I'm trying to set up an OpenVPN client on my Ubuntu server to connect to an AWS Client VPN endpoint. The VPN connection establishes successfully, but DNS queries for internal VPN resources (like AWS RDS instances) are not resolving.

I'd like to enable DNS resolution for internal AWS resources over the VPN using systemd-resolved.

OpenVPN Client Configuration:

So far, I've installed update-systemd-resolved as recommended and checked it's active and running, as well as configured.

client
dev tun
proto udp
remote [VPN_SERVER_ADDRESS] 443
remote-random-hostname
resolv-retry infinite
nobind
remote-cert-tls server
cipher AES-256-GCM
pull-filter ignore "redirect-gateway"
route 172.31.0.0 255.255.0.0
dhcp-option DNS 172.31.0.2

script-security 2
setenv PATH /usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
up /usr/local/libexec/openvpn/update-systemd-resolved
up-restart
down /usr/local/libexec/openvpn/update-systemd-resolved
down-pre

verb 4
log /var/log/openvpn-client.log

Despite this, when using resolvectl status, the tun0 interface does not have the VPS DNS Server assigned.

Global
       Protocols: -LLMNR -mDNS -DNSOverTLS DNSSEC=no/unsupported
 resolv.conf mode: stub

Link 2 (eth0)
    Current Scopes: DNS
         Protocols: +DefaultRoute +LLMNR -mDNS -DNSOverTLS DNSSEC=no/unsupported
Current DNS Server: 151.236.217.191
       DNS Servers: 212.71.252.5 88.80.186.183 151.236.217.191
        DNS Domain: members.linode.com

Link 9 (tun0)
    Current Scopes: none
         Protocols: -DefaultRoute +LLMNR -mDNS -DNSOverTLS DNSSEC=no/unsupported

How can I get OpenVPN to correctly update systemd-resolved so that DNS queries for internal VPN resources resolve properly? Is there something I'm missing in my configuration or additional steps I need to take to ensure the DNS settings are applied to the tun0 interface?

Any help is massively appreciated as I've been struggling with this for a while.

Kind regards

Hey there, I set up a RPI4 with PiVPN and OpenVPN. It worked flawlessly on windows, but when i tried it on my laptop running Linux Mint it simply timed out after 60 seconds.

I have very little experience in this and will provide information if needed.

The port is open on UDP on the Server. Firewall looks good. I quadrouple checked the keys and certs. Cipher, auth, data-ciphers and tls-cipher is the same on Server. Server Logs are empty. Client log says poll Server Timeout. What could the error be? (of cause i censored the importet informations)

client

dev tun

remote <IP> <port> udp

resolv-retry infinite

nobind

persist-key

persist-tun

# Enable TLS authentication

tls-version-min 1.2

# Set encryption settings

tls-cipher TLS-ECDHE-RSA-WITH-AES-256-GCM-SHA384

cipher AES-256-GCM

auth SHA256

data-ciphers AES-256-GCM:AES-128-GCM

route-nopull

# Log settings

verb 3

# DNS push options

redirect-gateway def1 bypass-dhcp

dhcp-option DNS 8.8.8.8

dhcp-option DNS 8.8.4.4

connect-timeout 30

-----BEGIN CERTIFICATE-----

...

ht3hCakn+ty/B0XSNcoxQX1ooVAbXJu59iOLuYrcT/nvFQROadwtB2oWFWhAV2fg

...

-----END CERTIFICATE-----

-----BEGIN CERTIFICATE-----

...

DhzSTxJMcy0SzvKD+6EYpBYwFDESMBAGA1UEAwwJY29tZ2FtaW5nghRUMAZ52KB6

...

-----END CERTIFICATE-----

-----BEGIN PRIVATE KEY-----

...

UtqHYkHey78Gt9DUv/WtzTECgYEA2xRDrrbzrChNCKccPQg/LXHVE0CCZ1otQiep

...

-----END PRIVATE KEY-----

...

1e247f9f91e5b78fc78879021852b5e2

...

I am honestly very new to the concept of self hosting as a whole, so please go easy on me if this is a rookie mistake and noob question...

I have been trying for days to setup a container with a VPN instance of OpenVPN running on ubuntu, but I cannot for the love of god make it work with any of my devices (an iPhone, an W11 Laptop and a Macbook) that I'm trying to connect from.

I cannot connect to the VPN in any way. I have opened the port on the container through my Fritz!Box's dashboard, but nothing changes.

I am suspecting there is a problem with the "tun" configuration and this is litterally the only thing I know.
I don't know how this topic really works and the guides I was able to find on youtube go in very little detail or are simply outdated.

I have been banging my head against the wall for days and have reinstalled various iterations of this container and never got it working. The one thing I would like, is to be able to access my proxmox dashboard from home, given that my homelab is actually sitting in my office at the company.

Any kind of help would be greatly appreciated and again, sorry if this is super basic, but I am at the beginning of my computer science journey and have still loads of stuff to study/learn.
Networking class is a couple of semesters into the future so I don't have a lot of knowledge on the topic currently.

For context: I followed this guide on youtube (I tried different ones in the last weeks but always got similar results) ---> https://www.youtube.com/watch?v=MAc_Hxu6yHk&t=782s

Hi,

I'm running a raspberry pi on raspberry OS and I'm trying to setup OpenVPN and Client and Server at the same time.

My Raspberry Pi is an OpenVPN client for a third party VPN to route all my traffic and "mask" my IP.
It's also a Server, so that my personal devices can connect to this raspberry pi and the services I'm running on it (split tunnel, only reaching my 192.168 network through this VPN).

For sanity, let's call the Raspberry-being-a-client-to-a-third-party-vpn" the "3PVPN"
The Raspberry-being-an-openvpn-server the "Server"
We'll call the devices acting as client and trying to connect to the "Server" the "Clients".

Additional info: Server is running on a custom port : 31313

Clients are connecting perfectly fine (split-tunnel and everything) to my server. Port forwarding works fine, etc etc.
3PVPN connection if working fine, tunneling all my raspberry's traffic into it.

My issue is that if my 3PVPN is connected, I cannot connect my clients to my server anymore.

I tried adding this to my 3PVPN client config file:

route-nopull

redirect-gateway def1

route 10.195.134.0 255.255.255.0 net_gateway

route 192.168.86.0 255.255.255.0 net_gateway

With 10.195.134.0 being my openvpn server subnet, and 192.168.86.0 being my local network
Nothing, still got the same issue...

When running a tcpdump I can see the incoming traffic coming to wlan0 interface, but going out from tun1 (3PVPN's interface). That's definitly the issue, but I can't grasp what I'm missing config-wise to achieve what I want.

Any help would be appreciated !

Hi, I have just now set up a vpn with openVPN to a point where I can connect to it using the ip address of the server and then the according credentials for user login. For now its just running with the openvpn self signed certificate but on the website they recommend to replace it with a valid and signed SSL certificate. Is that relevant for a secure client-server connection or am I as save just using the self signed ones?

When im trying to connect to my .ovpn file, i get this error in the logs. Im 100% certain that the ta.key is the same in the server.conf and in the client.ovpn. Pls help

2024-11-12 17:43:05 Initialization Sequence Completed

2024-11-12 17:43:12 Authenticate/Decrypt packet error: packet HMAC authentication failed

2024-11-12 17:43:12 TLS Error: incoming packet authentication failed from [AF_INET]

Hi All,

I have been using OpenVPN for a couple years now without fault, however, I am now migrating the VPN server from a Pi4 to a Netgate 4200.

There is one thing I do not understand when configuring the VPN. The server is on my home router and use the VPN client on the remote site router, however I can not ping/ see some remote devices unless I am also connected via the remote site gateway.

So for example, I have a retail shop and receive orders overnight via website, this alerts me via email and attaches a packing slip in the form of a PDF. Rather than accumulating say 10/15 orders overnight, I would like to be able to print these while at home to the remote site printer, except I can't see or access the remote site printer.

Although I have successfully been able to use the VPN, this seems to be one way, to clients behind the VPN server side, but not from home network to the remote site clients.

Do I need to have the remote site on the same subnet as my home devices, and do I need to set the remote site gateway to my home gateway to be able to access the clients.

Any help would be appreciated. Thanks.

I have a Chinese friend who wants to use VPN, so I recommend him this software. But it seems that this software is already BANNED in China, so he cannot find the way to download, how to solve this issue?

(I don't live in China)