OpenVPN Support Forum

Hello,

1 / I currently have a box where I connected by wifi an eepc under Debian Jessy to use it as vpn.
I intend to connect it with my parents in Reunion Island ...
I followed the following tutorial to set up my openvpn server:

https://youtu.be/YEWMxk2Ej3g

the fixed IP of my box is an address like :
165.xxx.xxx.xxx

My eepc is in 192.168.1.8 so I made the port forwarding on my box as follows:

943 web admin
443 TCP
1194 UDP

So I have an access to the web admin locally from the following addresses:

https://192.168.1.8:943/admin
https://165.xxx.xxx.xxx:943/admin

When I connect locally via the "openvpn connect" app on Android I can connect without any problem.

But from the outside with my address https://165.xxx.xxx.xxx I can not do it ....

Not being a network specialist, I admit that I can not set Access Server correctly ...

Here is what I have on the web admin home page when I log in:

Access Server version: 2.7.4
Server Name: 192.168.1.8
License Status: 2 devices
Current Active Users: 0
Authenticate users with: local
Accepting VPN client connections on IP address: all interfaces
Port for VPN client connections: tcp / 443, udp / 1194
OSI Layer: 3 (routing / NAT)
Clients access private subnets using: NAT
Node: La Fournaise

2 / Then, recently my box has awarded a new IP address to my server:

192.168.1.5

And when I connect locally it does not work anymore.
I see in the logs that it always connects to 192.168.1.8 even though I did the port forwarding on my box for 192.168.1.5 ...

3 / Finally ... From the web admin how to generate an ovpn configuration file (after all the above problems are solved of course)

Thank you in advance for your help....

In the web interface under Network Settings you need to make sure the hostname or IP address is set to a public address. We recommend a DNS name like "myvpnserver.yourdomain.com" that just resolves to your public IP. The address you put into the 'host name or IP address' is what clients will use to connect to your server. If you change this value, you have to update/replace the client configuration files on your VPN client systems.

You need ports TCP 443, TCP 943, and UDP 1194, opened on your router/firewall device, and pointed to the private IP of your Access Server installation.

To generate profiles, visit the access server without the /admin portion in the URL, and log on as a user, and download the offered user-locked or server-locked profile, or auto-login profile if this privilege is granted to the user, and use that to make a connection. Not all profiles are suitable for all situations or clients. User-locked and auto-login is generally accepted by almost any OpenVPN client.

Yeaaah it's working!!! Thank you soooooooooo much my friend!!!