Does not create TUN interfaces

[pedroalmeida1]

Good afternoon, my server is not accepting more than one connection, I have 2 branches connecting in the matrix, it completes the normal connection, but it only creates a tun interface, before when it worked it created an interface for each client, has anyone gone through this or is there any way to correct it?

[openvpn_inc]

Hello pedroalmeida1,

Perhaps you are not using OpenVPN Access Server, but you run an open source OpenVPN based server. Because OpenVPN Access Server creates as many tun interfaces as there are OpenVPN daemons, and that is entirely independent of the amount of VPN clients connected. For example Access Server could be running 2 OpenVPN daemons but serve 1, 2, 3, 4, or a 100, or a 1000, VPN client connections. You don't get more interfaces based on how many clients are connected with Access Server. And that is as it should be.

Kind regards,
Johan

[pedroalmeida1]

user@fc:~$ openvpn --version
OpenVPN 2.5.5 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Jul 14 2022
library versions: OpenSSL 3.0.2 15 Mar 2022, LZO 2.10
Originally developed by James Yonan
Copyright (C) 2002-2021 OpenVPN Inc <sales@openvpn.net>
Compile time defines: enable_async_push=no enable_comp_stub=no enable_crypto_ofb_cfb=yes enable_debug=yes enable_def_auth=yes enable_dependency_tracking=no enable_dlopen=unknown enable_dlopen_self=unknown enable_dlopen_self_static=unknown enable_fast_install=needless enable_fragment=yes enable_iproute2=no enable_libtool_lock=yes enable_lz4=yes enable_lzo=yes enable_maintainer_mode=no enable_management=yes enable_multihome=yes enable_option_checking=no enable_pam_dlopen=no enable_pedantic=no enable_pf=yes enable_pkcs11=yes enable_plugin_auth_pam=yes enable_plugin_down_root=yes enable_plugins=yes enable_port_share=yes enable_selinux=no enable_shared=yes enable_shared_with_static_runtimes=no enable_silent_rules=no enable_small=no enable_static=yes enable_strict=no enable_strict_options=no enable_systemd=yes enable_werror=no enable_win32_dll=yes enable_x509_alt_username=yes with_aix_soname=aix with_crypto_library=openssl with_gnu_ld=yes with_mem_check=no with_sysroot=no

[pedroalmeida1]

user@fc:~$ ip route
default dev ppp0 scope link
10.8.0.0/24 via 10.8.0.2 dev tun0
10.8.0.2 dev tun0 proto kernel scope link src 10.8.0.1
169.254.0.0/16 dev enp3s0 scope link metric 1000
179.127.143.73 dev ppp0 proto kernel scope link src 187.45.108.19
192.168.5.0/24 dev enp3s0 proto kernel scope link src 192.168.5.251 metric 101

[openvpn_inc]

Hello pedroalmeida1,

That pretty much confirms that you're not using OpenVPN Access Server, but the open source OpenVPN version.

My guess would be you were using net30 topology which is deprecated.

Moving this post to another section of the forums.

Kind regards,
Johan