Top OpenVPN questions and answers, please read this first, prior to posting.

[gotkimchi]

1) Q: I have found this forum by searching for OpenVPN on my favorite search engine, I need help?

A: This forum is for the Untangle's implementation of the OpenVPN. If you do not have the Untangle installation, you would need to try somewhere else for support, or maybe try us out.
If you are trying to get to the OpenVPN's forums, please check out https://forums.openvpn.net/

2) Q: My Untangle is in the bridge mode, how do I setup the OpenVPN?

A: Please read this thread:
http://forums.untangle.com/openvpn/1...e-openvpn.html

3) Q: I am about to setup the OpenVPN, what is the best and the easiest way?

A: http://forums.untangle.com/openvpn/1...iest-case.html

4) Q: I want to setup site to site VPN, help please?

A: http://forums.untangle.com/openvpn/8...tructions.html

5) Q: Does the OpenVPN support Vista or Windows 7?

A: Yes, please check out this wiki page.
http://wiki.untangle.com/index.php/O...ting_System.3F

6) Q: Does the OpenVPN support Mac users?
A: Yes, please check out this wiki page.
http://wiki.untangle.com/index.php/O...workstation.3F

7) Q: When I try to send the OpenVPN client via the email option, my users do not receive the email?

A: First, make sure that your email setting is correct (config, email). Run the email test. If you are getting the email test, you should be able to get the OpenVPN client email.

Your other option is to directly download the client from the Untangle.

8) Q: I can connect to the OpenVPN, however, I can not access anything?

A: Many things could cause this issue. First, check to see if the Windows firewall is not causing this issue. Try pinging the Untangle's internal IP address (assuming you are not blocking ping). If you are able to ping the Untangle, that means that the OpenVPN tunnel is up and functional. (more to come)

9) Q: I can access via the IP address, I want to access via their name?

A: Pending on who is doing the DNS on the network. If you have an internal DNS server, you will need to go into the advanced tab of the OpenVPN, checkmark the export DNS, and enable the DNS Override. Input the IP address of the DNS server. You will need to use the FQDN.

*You might also try flushing your DNS, on Windows, the command is ipconfig /flushdns


10) Q: Can I use 3rd party like DD-WRT to connect?

A: Currently, this is unsupported. We only support the OpenVPN running on the Untangle platform.

11) Q: Does OpenVPN support IPsec, PPTP, or any other types of VPN?

A: Currently, the OpenVPN implementation on the Untangle, is based on SSL.

12) Q: I need more help, what are my options?

A: OpenVPN is part of our Open Source package, if you have our paid package that includes support, please contact us via email or by calling us.
We do not offer pay per incident at this time.

Free support is available via this forum or wiki.untangle.com

13) Q: I have the Multi-WAN, does the OpenVPN work if my WAN fails?

A: Not at this time, currently, OpenVPN only works with the Primary WAN.

14) Q: I would like to restrict access to certain OpenVPN users?

A: Exported address/host on the OpenVPN is for everyone, if you want individual control, you would need to use the firewall module.

15) Q: My OpenVPN user is connected remotely, can I force all the traffic through the VPN tunnel so that they can be filtered by the web filter, spyware filter, and etc.?

A: Untangle's implementation of the OpenVPN uses split tunneling. Only the VPN traffic will traverse through the tunnel, and non VPN traffic will go out their normal way.

I know that the native OpenVPN supports full tunneling like PPTP, however, Untangle does not support this option.

16) Q: Scenario:
Multi-site VPN, site A (server side), B (client), and C (client).
Also have software clients added to the OpenVPN server side A.
A, B, and C, and talk to each other because you are exporting A, B, C's networks under exported hosts/networks.
The software clients can only talk to A, however you want them to communicate to all sites.

A: If you want the software clients to also talk to B and C, you will need to add the address pool of the software clients to the exported hosts/networks.


17) Q: My OpenVPN site to site is setup correctly, however, unable to pass traffic?

A: This is a very rare case, however this does happen from time to time. If you have site A with 1.2.3.4 and site B with 1.2.3.5, site to site VPN will not work, since both of them are in the same subnet or their gateways are the same. In order for the site to site VPN to work, each location needs to be completely different from the other location. You might need to ask your ISP to change one of your location's IP to a different subnet.

18) Q: Is there a way to setup a password for the OpenVPN users?

A: Yes, if you right click on the OpenVPN icon on the client's PC, there is an option for a password. This is the password to launch the OpenVPN client to connect.


19) Q: Ok, I have read this post and I want to ask a question, what is the best way?

A: More information the better, example:
Site to Site or Site to Client VPN:
Untangle version:
Router mode or Bride mode:
OpenVPN client's OS:
What issues are you experiencing or briefly describe the issue: