PASSTOS

[kanicus]

Hello, I would like to use OpenVPN with passtos option in both sides for VoIP calls between IP phones and IP PBX but I dont have find any example about how to do it, anyone ciuld give me a reference?

Now Im working this Pfsense and OpenVPn-Gui on clients but don know where to put the --passtos paramter, would be nice to mantain my Pfsense install but no problem to have a dedicated server on dmz for OpenVPN,
many thanks

[krzee]

sounds like you know what you need from openvpn...
if everything works how you want when running commandline, you need to talk to the pfsense guys

[kanicus]

Thanks for reply, if pfsense guys suppost the TOS bit preservation on Pfsense Beta 2.0, but I cant wait for a stable release can take 6 months more, I saw the --passtos option on OpenVpn documentation but dont know how to use it at client side using openvpn-gui, putting it into config file give me an error and dont know how I can add parameters to command line execution of openvpn while using gui at client side (Windows machines).
On server side I can make a virtual machine with anything but all remote workers launch VPNs from Windows client with openvpn-gui.

How I can use the passtos parameter¿?

Many thanks

[krzee]

what error did it give you?
windows gui has nothing to do with the config, you just put the config options into the config, the gui is for starting / stopping the config

[kanicus]

I just put passtos parameter at the end of config file, and when try con connect to server it gives me the error:
Options error: Unrecognized option or missing parameter(s) in [conf_file.ovpn]:18: passtos
I also tried with "-" using --passtos wit same result.

Later I saw some where that this option only works on linux machines not on windows clients.
Anyone knows if this is true and if its scheduled a fix to allow passtos on windows machines?

Many thanks

[janjust]

Yes, this is true: the current builds of OpenVPN do not enable --passtos support, most likely due to bad support in the underlying win32 subsystem; this option is missing in both openvpn 2.1.4 and the current build of 2.2RC.
I do not expect this option to be enabled in the final version of 2.2, if somebody can write a patch it could be included for OpenVPN 2.3.