econst Hi all, I have an OpenVPN server running on Ubuntu 18.04. It uses the UDP protocol and certificates.This works great. I now want to run a TCP instance on the same server, but this instance should have a config that will allow clients to connect using a username and password. Both instances should be able to run simultaneously. Is this possible? TIA
300000 Yes you can run multi openvpn instance at one as soon as different port and virual ip space it will ok On authentication you can run on certificate and user name too so basic you can do whatever you like
econst Thanks for the reply. Some time ago I had a server running one config with three different ports in bridge mode. Its something like that I am thinking, but dont know I'd make the differentiation between connection using certificates and that of username password. Or did you mean that I can create a different config and have both running on the same server? If that is what you meant then that you be easier, no differentiation to make.
300000 this is my raspberry run three instance openvpn . note tun from 0 to 2 so you need only change tun to 1 and ip address that is all you need to do to make it work
Pippin You can create two config files, one for UDP and one for TCP. As 300000 mentioned, use different ports and tunnel subnet. In addition to that, use different tun device names, f.e.: dev tunudp dev-type tun proto udp port 1194 server 172.20.1.0 255.255.255.0 dev tuntcp dev-type tun proto tcp port 1195 server 172.20.2.0 255.255.255.0 auth-user-pass-verify /etc/openvpn/server/scripts/userauth.sh via-env
econst Thanks again for your responses. I think I got it now. Had set up several servers before, all using certificates and never with username/password. what I am not getting is the Username/password part. Lets say for example I wanted to have 5 users being able to connect to the server. Where do I store the Username/password info? A part of the config, or create users on the Ubuntu box?