Multiple Tunnels on the same server

[gcc_computo]

Hello,
How can I run two tunnels or instances on the same server?
I went to search for this on the net but nothing really helpful was there on the net. no How-to's or tutorials for this.

What I want to do is:
On One server (running Windows 2003) that is already running OpenVPN with a routed tunnel or conection, run a bridged connection too. Some call this multiple instances and some refer to this as multiple tunnels, but there is no guide on how to do this, can some one help??

Thanks.

[krzee]

just setup 2 configs, and run both (on different combo of ip/port/protocol of course)

[gcc_computo]

Can I use the same NIC and TAP adapter?

I have one NIC and TAP adapter working for the first tunnel, can I bridge them and use that bridge for the other config??

Thanks.

[krzee]

no, you need another adapter
from http://www.openvpn.net/INSTALL-win32.html
"Multiple OpenVPN processes can run concurrently, each on a different TAP-Win32 adapter."

[gcc_computo]

Hello,
I have a few questions...
1)Can I use the same key for the two connections?

2)Why is the tap adapter on the bridged connection not connected?
It says that the networkt cable is disconnected... the other connection is OK, is working fine just the bridged one is not working.

Here is the server config file (bridge.ovpn)
---------------------------
port 1194
proto udp
dev tap
dev-node tap-bridge
ca "C:\\Archivos de programa\\OpenVPN\\keys\\ca.crt"
cert "C:\\Archivos de programa\\OpenVPN\\keys\\server.crt"
key "C:\\Archivos de programa\\OpenVPN\\keys\\server.key"
dh "C:\\Archivos de programa\\OpenVPN\\keys\\dh1024.pem"
ifconfig-pool-persist ipp2.txt
server-bridge 192.168.1.2 255.255.255.0 192.168.1.50 192.168.1.69
client-to-client
keepalive 10 120
comp-lzo
persist-key
persist-tun
status openvpn-status.log
verb 6


Other server config file Working one! (server.ovpn)
------------------------------------------------
port 1194
proto tcp
dev tun
dev-node openvpn-server
ca "C:\\Archivos de programa\\OpenVPN\\keys\\ca.crt"
cert "C:\\Archivos de programa\\OpenVPN\\keys\\server.crt"
key "C:\\Archivos de programa\\OpenVPN\\keys\\server.key"
dh "C:\\Archivos de programa\\OpenVPN\\keys\\dh1024.pem"
server 172.16.0.0 255.255.0.0
ifconfig-pool-persist ipp.txt
client-to-client
keepalive 10 120
comp-lzo
persist-key
persist-tun
status openvpn-status.log
verb 3


Log of the bridged connection:
-----------------------------
Fri Nov 26 18:56:18 2010 us=68780 Current Parameter Settings:
Fri Nov 26 18:56:18 2010 us=68893 config = 'bridge.ovpn'
Fri Nov 26 18:56:18 2010 us=68909 mode = 1
Fri Nov 26 18:56:18 2010 us=68922 show_ciphers = DISABLED
Fri Nov 26 18:56:18 2010 us=68935 show_digests = DISABLED
Fri Nov 26 18:56:18 2010 us=68947 show_engines = DISABLED
Fri Nov 26 18:56:18 2010 us=68960 genkey = DISABLED
Fri Nov 26 18:56:18 2010 us=68972 key_pass_file = '[UNDEF]'
Fri Nov 26 18:56:18 2010 us=68985 show_tls_ciphers = DISABLED
Fri Nov 26 18:56:18 2010 us=68997 proto = 0
Fri Nov 26 18:56:18 2010 us=69010 local = '[UNDEF]'
Fri Nov 26 18:56:18 2010 us=69022 remote_list = NULL
Fri Nov 26 18:56:18 2010 us=69034 remote_random = DISABLED
Fri Nov 26 18:56:18 2010 us=69048 local_port = 1194
Fri Nov 26 18:56:18 2010 us=69061 remote_port = 1194
Fri Nov 26 18:56:18 2010 us=69074 remote_float = DISABLED
Fri Nov 26 18:56:18 2010 us=69086 ipchange = '[UNDEF]'
Fri Nov 26 18:56:18 2010 us=69098 bind_local = ENABLED
Fri Nov 26 18:56:18 2010 us=69110 dev = 'tap'
Fri Nov 26 18:56:18 2010 us=69123 dev_type = '[UNDEF]'
Fri Nov 26 18:56:18 2010 us=69135 dev_node = 'tap-bridge'
Fri Nov 26 18:56:18 2010 us=69147 tun_ipv6 = DISABLED
Fri Nov 26 18:56:18 2010 us=69160 ifconfig_local = '[UNDEF]'
Fri Nov 26 18:56:18 2010 us=69173 ifconfig_remote_netmask = '[UNDEF]'
Fri Nov 26 18:56:18 2010 us=69185 ifconfig_noexec = DISABLED
Fri Nov 26 18:56:18 2010 us=69198 ifconfig_nowarn = DISABLED
Fri Nov 26 18:56:18 2010 us=69210 shaper = 0
Fri Nov 26 18:56:18 2010 us=69223 tun_mtu = 1500
Fri Nov 26 18:56:18 2010 us=69235 tun_mtu_defined = ENABLED
Fri Nov 26 18:56:18 2010 us=69248 link_mtu = 1500
Fri Nov 26 18:56:18 2010 us=69260 link_mtu_defined = DISABLED
Fri Nov 26 18:56:18 2010 us=69273 tun_mtu_extra = 32
Fri Nov 26 18:56:18 2010 us=69286 tun_mtu_extra_defined = ENABLED
Fri Nov 26 18:56:18 2010 us=69298 fragment = 0
Fri Nov 26 18:56:18 2010 us=69311 mtu_discover_type = -1
Fri Nov 26 18:56:18 2010 us=69324 mtu_test = 0
Fri Nov 26 18:56:18 2010 us=69336 mlock = DISABLED
Fri Nov 26 18:56:18 2010 us=69348 keepalive_ping = 10
Fri Nov 26 18:56:18 2010 us=69361 keepalive_timeout = 120
Fri Nov 26 18:56:18 2010 us=69374 inactivity_timeout = 0
Fri Nov 26 18:56:18 2010 us=69387 ping_send_timeout = 10
Fri Nov 26 18:56:18 2010 us=69399 ping_rec_timeout = 240
Fri Nov 26 18:56:18 2010 us=69412 ping_rec_timeout_action = 2
Fri Nov 26 18:56:18 2010 us=69425 ping_timer_remote = DISABLED
Fri Nov 26 18:56:18 2010 us=69437 remap_sigusr1 = 0
Fri Nov 26 18:56:18 2010 us=69450 explicit_exit_notification = 0
Fri Nov 26 18:56:18 2010 us=69463 persist_tun = ENABLED
Fri Nov 26 18:56:18 2010 us=69475 persist_local_ip = DISABLED
Fri Nov 26 18:56:18 2010 us=69488 persist_remote_ip = DISABLED
Fri Nov 26 18:56:18 2010 us=69500 persist_key = ENABLED
Fri Nov 26 18:56:18 2010 us=69513 mssfix = 1450
Fri Nov 26 18:56:18 2010 us=69526 resolve_retry_seconds = 1000000000
Fri Nov 26 18:56:18 2010 us=69539 connect_retry_seconds = 5
Fri Nov 26 18:56:18 2010 us=69551 username = '[UNDEF]'
Fri Nov 26 18:56:18 2010 us=69564 groupname = '[UNDEF]'
Fri Nov 26 18:56:18 2010 us=69576 chroot_dir = '[UNDEF]'
Fri Nov 26 18:56:18 2010 us=69588 cd_dir = '[UNDEF]'
Fri Nov 26 18:56:18 2010 us=69600 writepid = '[UNDEF]'
Fri Nov 26 18:56:18 2010 us=69613 up_script = '[UNDEF]'
Fri Nov 26 18:56:18 2010 us=69625 down_script = '[UNDEF]'
Fri Nov 26 18:56:18 2010 us=69637 down_pre = DISABLED
Fri Nov 26 18:56:18 2010 us=69649 up_restart = DISABLED
Fri Nov 26 18:56:18 2010 us=69661 up_delay = DISABLED
Fri Nov 26 18:56:18 2010 us=69673 daemon = DISABLED
Fri Nov 26 18:56:18 2010 us=69685 inetd = 0
Fri Nov 26 18:56:18 2010 us=69697 log = DISABLED
Fri Nov 26 18:56:18 2010 us=69709 suppress_timestamps = DISABLED
Fri Nov 26 18:56:18 2010 us=69721 nice = 0
Fri Nov 26 18:56:18 2010 us=69733 verbosity = 6
Fri Nov 26 18:56:18 2010 us=69745 mute = 0
Fri Nov 26 18:56:18 2010 us=69757 gremlin = 0
Fri Nov 26 18:56:18 2010 us=69818 status_file = 'openvpn-status.log'
Fri Nov 26 18:56:18 2010 us=69836 status_file_version = 1
Fri Nov 26 18:56:18 2010 us=69850 status_file_update_freq = 60
Fri Nov 26 18:56:18 2010 us=69863 occ = ENABLED
Fri Nov 26 18:56:18 2010 us=69875 rcvbuf = 0
Fri Nov 26 18:56:18 2010 us=69887 sndbuf = 0
Fri Nov 26 18:56:18 2010 us=69899 socks_proxy_server = '[UNDEF]'
Fri Nov 26 18:56:18 2010 us=69915 socks_proxy_port = 0
Fri Nov 26 18:56:18 2010 us=69928 socks_proxy_retry = DISABLED
Fri Nov 26 18:56:18 2010 us=69940 fast_io = DISABLED
Fri Nov 26 18:56:18 2010 us=69952 comp_lzo = ENABLED
Fri Nov 26 18:56:18 2010 us=69965 comp_lzo_adaptive = ENABLED
Fri Nov 26 18:56:18 2010 us=69977 route_script = '[UNDEF]'
Fri Nov 26 18:56:18 2010 us=69990 route_default_gateway = '[UNDEF]'
Fri Nov 26 18:56:18 2010 us=70002 route_noexec = DISABLED
Fri Nov 26 18:56:18 2010 us=70014 route_delay = 0
Fri Nov 26 18:56:18 2010 us=70026 route_delay_window = 30
Fri Nov 26 18:56:18 2010 us=70039 route_delay_defined = DISABLED
Fri Nov 26 18:56:18 2010 us=70052 management_addr = '[UNDEF]'
Fri Nov 26 18:56:18 2010 us=70064 management_port = 0
Fri Nov 26 18:56:18 2010 us=70077 management_user_pass = '[UNDEF]'
Fri Nov 26 18:56:18 2010 us=70090 management_log_history_cache = 250
Fri Nov 26 18:56:18 2010 us=70102 management_echo_buffer_size = 100
Fri Nov 26 18:56:18 2010 us=70115 management_query_passwords = DISABLED
Fri Nov 26 18:56:18 2010 us=70128 management_hold = DISABLED
Fri Nov 26 18:56:18 2010 us=70141 shared_secret_file = '[UNDEF]'
Fri Nov 26 18:56:18 2010 us=70153 key_direction = 0
Fri Nov 26 18:56:18 2010 us=70165 ciphername_defined = ENABLED
Fri Nov 26 18:56:18 2010 us=70177 ciphername = 'BF-CBC'
Fri Nov 26 18:56:18 2010 us=70190 authname_defined = ENABLED
Fri Nov 26 18:56:18 2010 us=70202 authname = 'SHA1'
Fri Nov 26 18:56:18 2010 us=70214 keysize = 0
Fri Nov 26 18:56:18 2010 us=70226 engine = DISABLED
Fri Nov 26 18:56:18 2010 us=70239 replay = ENABLED
Fri Nov 26 18:56:18 2010 us=70251 mute_replay_warnings = DISABLED
Fri Nov 26 18:56:18 2010 us=70263 replay_window = 64
Fri Nov 26 18:56:18 2010 us=70276 replay_time = 15
Fri Nov 26 18:56:18 2010 us=70289 packet_id_file = '[UNDEF]'
Fri Nov 26 18:56:18 2010 us=70301 use_iv = ENABLED
Fri Nov 26 18:56:18 2010 us=70313 test_crypto = DISABLED
Fri Nov 26 18:56:18 2010 us=70325 tls_server = ENABLED
Fri Nov 26 18:56:18 2010 us=70337 tls_client = DISABLED
Fri Nov 26 18:56:18 2010 us=70349 key_method = 2
Fri Nov 26 18:56:18 2010 us=70362 ca_file = 'C:\Archivos de programa\OpenVPN\keys\ca.crt'
Fri Nov 26 18:56:18 2010 us=70376 dh_file = 'C:\Archivos de programa\OpenVPN\keys\dh1024.pem'
Fri Nov 26 18:56:18 2010 us=70390 cert_file = 'C:\Archivos de programa\OpenVPN\keys\server.crt'
Fri Nov 26 18:56:18 2010 us=70404 priv_key_file = 'C:\Archivos de programa\OpenVPN\keys\server.key'
Fri Nov 26 18:56:18 2010 us=70417 pkcs12_file = '[UNDEF]'
Fri Nov 26 18:56:18 2010 us=70429 cryptoapi_cert = '[UNDEF]'
Fri Nov 26 18:56:18 2010 us=70441 cipher_list = '[UNDEF]'
Fri Nov 26 18:56:18 2010 us=70453 tls_verify = '[UNDEF]'
Fri Nov 26 18:56:18 2010 us=70465 tls_remote = '[UNDEF]'
Fri Nov 26 18:56:18 2010 us=70477 crl_file = '[UNDEF]'
Fri Nov 26 18:56:18 2010 us=70488 ns_cert_type = 0
Fri Nov 26 18:56:18 2010 us=70500 tls_timeout = 2
Fri Nov 26 18:56:18 2010 us=70512 renegotiate_bytes = 0
Fri Nov 26 18:56:18 2010 us=70524 renegotiate_packets = 0
Fri Nov 26 18:56:18 2010 us=70537 renegotiate_seconds = 3600
Fri Nov 26 18:56:18 2010 us=70549 handshake_window = 60
Fri Nov 26 18:56:18 2010 us=70562 transition_window = 3600
Fri Nov 26 18:56:18 2010 us=70574 single_session = DISABLED
Fri Nov 26 18:56:18 2010 us=70586 tls_exit = DISABLED
Fri Nov 26 18:56:18 2010 us=70598 tls_auth_file = '[UNDEF]'
Fri Nov 26 18:56:18 2010 us=70611 server_network = 0.0.0.0
Fri Nov 26 18:56:18 2010 us=70625 server_netmask = 0.0.0.0
Fri Nov 26 18:56:18 2010 us=70641 server_bridge_ip = 192.168.1.2
Fri Nov 26 18:56:18 2010 us=70656 server_bridge_netmask = 255.255.255.0
Fri Nov 26 18:56:18 2010 us=70670 server_bridge_pool_start = 192.168.1.50
Fri Nov 26 18:56:18 2010 us=70684 server_bridge_pool_end = 192.168.1.69
Fri Nov 26 18:56:18 2010 us=70697 push_list = 'route-gateway 192.168.1.2,ping 10,ping-restart 120'
Fri Nov 26 18:56:18 2010 us=70710 ifconfig_pool_defined = ENABLED
Fri Nov 26 18:56:18 2010 us=70724 ifconfig_pool_start = 192.168.1.50
Fri Nov 26 18:56:18 2010 us=70738 ifconfig_pool_end = 192.168.1.69
Fri Nov 26 18:56:18 2010 us=70752 ifconfig_pool_netmask = 255.255.255.0
Fri Nov 26 18:56:18 2010 us=70765 ifconfig_pool_persist_filename = 'ipp2.txt'
Fri Nov 26 18:56:18 2010 us=70779 ifconfig_pool_persist_refresh_freq = 600
Fri Nov 26 18:56:18 2010 us=70792 ifconfig_pool_linear = DISABLED
Fri Nov 26 18:56:18 2010 us=70804 n_bcast_buf = 256
Fri Nov 26 18:56:18 2010 us=70816 tcp_queue_limit = 64
Fri Nov 26 18:56:18 2010 us=70829 real_hash_size = 256
Fri Nov 26 18:56:18 2010 us=70841 virtual_hash_size = 256
Fri Nov 26 18:56:18 2010 us=70854 client_connect_script = '[UNDEF]'
Fri Nov 26 18:56:18 2010 us=70867 learn_address_script = '[UNDEF]'
Fri Nov 26 18:56:18 2010 us=70880 client_disconnect_script = '[UNDEF]'
Fri Nov 26 18:56:18 2010 us=70893 client_config_dir = '[UNDEF]'
Fri Nov 26 18:56:18 2010 us=70905 ccd_exclusive = DISABLED
Fri Nov 26 18:56:18 2010 us=70918 tmp_dir = '[UNDEF]'
Fri Nov 26 18:56:18 2010 us=70930 push_ifconfig_defined = DISABLED
Fri Nov 26 18:56:18 2010 us=70944 push_ifconfig_local = 0.0.0.0
Fri Nov 26 18:56:18 2010 us=70958 push_ifconfig_remote_netmask = 0.0.0.0
Fri Nov 26 18:56:18 2010 us=70971 enable_c2c = ENABLED
Fri Nov 26 18:56:18 2010 us=70982 duplicate_cn = DISABLED
Fri Nov 26 18:56:18 2010 us=70994 cf_max = 0
Fri Nov 26 18:56:18 2010 us=71006 cf_per = 0
Fri Nov 26 18:56:18 2010 us=71018 max_clients = 1024
Fri Nov 26 18:56:18 2010 us=71030 max_routes_per_client = 256
Fri Nov 26 18:56:18 2010 us=71043 client_cert_not_required = DISABLED
Fri Nov 26 18:56:18 2010 us=71056 username_as_common_name = DISABLED
Fri Nov 26 18:56:18 2010 us=71069 auth_user_pass_verify_script = '[UNDEF]'
Fri Nov 26 18:56:18 2010 us=71082 auth_user_pass_verify_script_via_file = DISABLED
Fri Nov 26 18:56:18 2010 us=71095 client = DISABLED
Fri Nov 26 18:56:18 2010 us=71106 pull = DISABLED
Fri Nov 26 18:56:18 2010 us=71119 auth_user_pass_file = '[UNDEF]'
Fri Nov 26 18:56:18 2010 us=71134 show_net_up = DISABLED
Fri Nov 26 18:56:18 2010 us=71146 route_method = 0
Fri Nov 26 18:56:18 2010 us=71159 ip_win32_defined = DISABLED
Fri Nov 26 18:56:18 2010 us=71171 ip_win32_type = 3
Fri Nov 26 18:56:18 2010 us=71183 dhcp_masq_offset = 0
Fri Nov 26 18:56:18 2010 us=71196 dhcp_lease_time = 31536000
Fri Nov 26 18:56:18 2010 us=71208 tap_sleep = 10
Fri Nov 26 18:56:18 2010 us=71220 dhcp_options = DISABLED
Fri Nov 26 18:56:18 2010 us=71232 dhcp_renew = DISABLED
Fri Nov 26 18:56:18 2010 us=71245 dhcp_pre_release = DISABLED
Fri Nov 26 18:56:18 2010 us=71256 dhcp_release = DISABLED
Fri Nov 26 18:56:18 2010 us=71269 domain = '[UNDEF]'
Fri Nov 26 18:56:18 2010 us=71281 netbios_scope = '[UNDEF]'
Fri Nov 26 18:56:18 2010 us=71293 netbios_node_type = 0
Fri Nov 26 18:56:18 2010 us=71305 disable_nbt = DISABLED
Fri Nov 26 18:56:18 2010 us=71321 OpenVPN 2.0.9 Win32-MinGW [SSL] [LZO] built on Oct 1 2006
Fri Nov 26 18:56:18 2010 us=102131 Diffie-Hellman initialized with 1024 bit key
Fri Nov 26 18:56:18 2010 us=103439 TLS-Auth MTU parms [ L:1574 D:138 EF:38 EB:0 ET:0 EL:0 ]
Fri Nov 26 18:56:18 2010 us=108557 TAP-WIN32 device [tap-bridge] opened: \\.\Global\{32123FD5-0227-4F56-8099-CA76AD8804FC}.tap
Fri Nov 26 18:56:18 2010 us=108591 TAP-Win32 Driver Version 8.4
Fri Nov 26 18:56:18 2010 us=108609 TAP-Win32 MTU=1500
Fri Nov 26 18:56:18 2010 us=108704 Sleeping for 10 seconds...
Fri Nov 26 18:56:28 2010 us=125619 NOTE: could not get adapter index for \DEVICE\TCPIP_{32123FD5-0227-4F56-8099-CA76AD8804FC}, status=55 : El recurso de red o el dispositivo especificados ya no se encuentran disponibles.
Fri Nov 26 18:56:28 2010 us=125693 Data Channel MTU parms [ L:1574 D:1450 EF:42 EB:135 ET:32 EL:0 AF:3/1 ]
Fri Nov 26 18:56:28 2010 us=125737 Socket Buffers: R=[8192->8192] S=[8192->8192]
Fri Nov 26 18:56:28 2010 us=125762 UDPv4 link local (bound): [undef]:1194
Fri Nov 26 18:56:28 2010 us=125775 UDPv4 link remote: [undef]
Fri Nov 26 18:56:28 2010 us=125789 MULTI: multi_init called, r=256 v=256
Fri Nov 26 18:56:28 2010 us=125825 IFCONFIG POOL: base=192.168.1.50 size=20
Fri Nov 26 18:56:28 2010 us=125851 IFCONFIG POOL LIST
Fri Nov 26 18:56:28 2010 us=125889 Initialization Sequence Completed
Fri Nov 26 18:56:36 2010 us=779210 TCP/UDP: Closing socket
Fri Nov 26 18:56:36 2010 us=779335 Closing TUN/TAP interface
Fri Nov 26 18:56:36 2010 us=795206 SIGTERM[hard,] received, process exiting

Any ideas??? Why the adapter is not working??

[krzee]

first of all, update your openvpn, www.openvpn.net/download

1)Can I use the same key for the two connections?

yes, is you enable that... but since you do not have password auth, you should not... just go make another cert/key.

Code: Select all

2)Why is the tap adapter on the bridged connection not connected?

I dont know, i dont use bridges so im unable to support them (they are rarely needed)