One OpenVPN server with multiple client connection

puspharaj

Hi There,

I was trying to setup my openvpn server inside the aws VPC and after few days i figured it out and successfully established the connection server to client(windows).

But the problem is i got several client machine like windows 5 machine and linux 8 machine in my office.

So how do i connect the all the machine at the same time or regardless of the time. i knew i can play with dev tun option but i ended message like

tailf /var/log/messages

Apr 22 00:08:59 vpn-server kernel: tun5: Disabled Privacy Extensions
Apr 22 00:09:13 vpn-server kernel: tun20: Disabled Privacy Extensions
Apr 22 00:14:30 vpn-server kernel: tun20: Disabled Privacy Extensions
Apr 22 00:18:26 vpn-server kernel: tun0: Disabled Privacy Extensions

my windows and ubuntu trying to connect at the same time but either one of the machine got connected and the same time one is disconnected

Any solutions will be greatly appreciated

thanks
Raj

krzee

you need a new certificate for every client

puspharaj

krzee,

Thanks for the info

So i dont need to touch my server.conf ? Just creating a certificate will do the trick ?

thanks
Raj

krzee

give it a try and tell me 😉

puspharaj

Sorry for the delay

Here is my server.conf

dev tun
proto tcp
port 8080

ca /etc/openvpn/config-files/2.0/keys/ca.crt
cert /etc/openvpn/config-files/2.0/keys/server.crt
key /etc/openvpn/config-files/2.0/keys/server.key
dh /etc/openvpn/config-files/2.0/keys/dh1024.pem

server 10.8.0.0 255.255.255.0

#push "route 10.8.1.0 255.255.255.0"

push "redirect-gateway def1"
persist-key
persist-tun

status /var/log/openvpn-status.log
verb 3
client-to-client

comp-lzo

my client windows conf

client
dev tun
proto tcp
remote xx.xx.xxx.xx 8080
resolv-retry infinite
nobind
persist-key
persist-tun
comp-lzo
ca ca.crt
cert winclient1.crt
key winclient1.key
verb 3
--script-security 2
ns-cert-type server

i have created some client cert for the ubuntu machine but its trying to lock openvpn

any help greatly appreciated 🙂

thanks
Raj

krzee

no idea what you're trying to say...
whats the problem?