January 16, 201511 yr <off topic> It isn't broke and it does everything I need! I tried to upgrade to 5.0.1 awhile back (maybe a year) and SimpleFeatures was not compatible so I backed out. What am I missing out on? To avoid hijacking this thread send me a PM. </back to topic>
January 16, 201511 yr Hi, I visited the Openvpn site, but to be honest I don´t know where to start really. There are too many options (even if I look at tun/routing only). Being a linux noob I managed to create several vm´s using unraid 6b following guidance in this great forum, but I feel Openvpn is a little more challenging. I need a little bit of help from you so that I can start and follow the right path. I did not find a guide like the one Peter posted on how to create a vm with gpu passthrough. Maybe I should start first on describing what are my objectives. I want to secure the: -access from my android devices to my lan [unraid 6b + vm´s] -access from my windows laptop to my lan [unraid 6b + vm´s] >in both cases the devices are accesing my lan from outside -access from devices in my lan connecting to internet (android devices + vm´s). I am running unraid 6b 24/7 with 2/4 vm´s (windows and linux). I am not sure if setting up Peter´s Openvpn-server plugin would impact the performance of the vm´s/unraid. Also, if using only 1 ethernet adaptor (the one from unraid) for the whole setup would be a bottleneck. Let me know if I should start a new thread. All this is related to the plugin but I need to start asking all these questions to be able to setup Openvpn properly.
January 17, 201511 yr Author Do you need to run OpenVPN server on a VM? if yo run it with the plugin you going to have access to your complete LAN, other question are better to ask in the OpenVPN forum. //Peter
January 18, 201511 yr Nice plugin but Im having issues with start up. I can start VPN from command line but it will never start from the GUI. Keep getting error "Options error: You must define TUN/TAP device (--dev)".
January 18, 201511 yr Has anyone had any success in configuring Plex server to allow for remote streaming while connected to a VPN?
January 19, 201511 yr truckerCLOCK - I was having the same issue. See my post above: 2. With the updated plugin installed I tried to launch my VPN connection. I get the following error: Options error: You must define TUN/TAP device (--dev) Use --help for more information. I found the rc.openvpn file was running a function that expected the interface to be named 'tun5'. I had to change 'dev tun' to 'dev tun5' in my OpenVPN configuration file in /boot/openvpn as the startup script was deleting 'dev tun' each time it ran. I got the configuration file from OctaneVPN. Hope this helps!
January 19, 201511 yr truckerCLOCK - I was having the same issue. See my post above: 2. With the updated plugin installed I tried to launch my VPN connection. I get the following error: Options error: You must define TUN/TAP device (--dev) Use --help for more information. I found the rc.openvpn file was running a function that expected the interface to be named 'tun5'. I had to change 'dev tun' to 'dev tun5' in my OpenVPN configuration file in /boot/openvpn as the startup script was deleting 'dev tun' each time it ran. I got the configuration file from OctaneVPN. Hope this helps! Ya I seen your post and double checked my config file and yup it does change it to "tun5". I need to do a little more digging as I haven't really had time to figure this out. Like it flashes an error message super fast right after I hit start. So thanks for the reply.
January 19, 201511 yr Got it....it was totally my fault. So stupid, my config file is "TorGuard.Canada.ovpn" and I forgot to add the first period. Excellent plugin BTW
January 22, 201511 yr Hi, i have the following problem. My isp make a 24h disconnect every day. If the 24h disconnect is during i´m connect to the vpn i could not connect web gui anymore. The share from my server is accessible also the server with telnet is accessible only the webgui i could not connect. I must restart the complete server, then i could connect again to the web gui. Is there anything i could do ?
January 28, 201511 yr Guys Question for you. I have Private Internet access and I'm trying to get this 64-bit Client running on Unraid 6.0-beta12. I installed the plug-in successfully and then accessed Settings and then OpenVPN Client Configuration. There I have the following: Use password to login? Yes Client configuration file US East Username xxxxx Password xxxxx Start OpenvPN during array mounting No Extended Routing None The "US East" configuration file was downloaded here and placed in flash->config->plugins->openvpnclient: https://www.privateinternetaccess.com/pages/client-support/ Opening that file in Wordpad: "client dev tun proto udp remote us-east.privateinternetaccess.com 1194 resolv-retry infinite nobind persist-key persist-tun ca ca.crt tls-client remote-cert-tls server auth-user-pass comp-lzo verb 1 reneg-sec 0 crl-verify crl.pem" I reboot Unraid and now the Main OpenVPN Client Settings page shows "US East" as the config file. I hit the Start button and it says "Starting Openvpn Tunnel: Please Wait" but then goes to saying "Not Connected" and it doesn't start. Any ideas?? Thank guys!! Jim
January 28, 201511 yr Guys Question for you. I have Private Internet access and I'm trying to get this 64-bit Client running on Unraid 6.0-beta12. I installed the plug-in successfully and then accessed Settings and then OpenVPN Client Configuration. There I have the following: Use password to login? Yes Client configuration file US East Username xxxxx Password xxxxx Start OpenvPN during array mounting No Extended Routing None The "US East" configuration file was downloaded here and placed in flash->config->plugins->openvpnclient: https://www.privateinternetaccess.com/pages/client-support/ Opening that file in Wordpad: "client dev tun proto udp remote us-east.privateinternetaccess.com 1194 resolv-retry infinite nobind persist-key persist-tun ca ca.crt tls-client remote-cert-tls server auth-user-pass comp-lzo verb 1 reneg-sec 0 crl-verify crl.pem" I reboot Unraid and now the Main OpenVPN Client Settings page shows "US East" as the config file. I hit the Start button and it says "Starting Openvpn Tunnel: Please Wait" but then goes to saying "Not Connected" and it doesn't start. Any ideas?? Thank guys!! Jim Ok where did you place your PIA config files? Did you make an openvpn folder in the boot directory? If not make one and place your CA and any config files in that folder. When you start the plugin it should say the config file is located at /boot/openvpn/ whatever your file is named.
January 29, 201511 yr Guys Question for you. I have Private Internet access and I'm trying to get this 64-bit Client running on Unraid 6.0-beta12. I installed the plug-in successfully and then accessed Settings and then OpenVPN Client Configuration. There I have the following: Use password to login? Yes Client configuration file US East Username xxxxx Password xxxxx Start OpenvPN during array mounting No Extended Routing None The "US East" configuration file was downloaded here and placed in flash->config->plugins->openvpnclient: https://www.privateinternetaccess.com/pages/client-support/ Opening that file in Wordpad: "client dev tun proto udp remote us-east.privateinternetaccess.com 1194 resolv-retry infinite nobind persist-key persist-tun ca ca.crt tls-client remote-cert-tls server auth-user-pass comp-lzo verb 1 reneg-sec 0 crl-verify crl.pem" I reboot Unraid and now the Main OpenVPN Client Settings page shows "US East" as the config file. I hit the Start button and it says "Starting Openvpn Tunnel: Please Wait" but then goes to saying "Not Connected" and it doesn't start. Any ideas?? Thank guys!! Jim Ok where did you place your PIA config files? Did you make an openvpn folder in the boot directory? If not make one and place your CA and any config files in that folder. When you start the plugin it should say the config file is located at /boot/openvpn/ whatever your file is named. Thanks for the note and tip. I created an openvpn folder in the boot directory and then placed the above referenced "US East" config folder inside it. Tried to start it again and same problem - won't start. Any other ideas? Anything I can show that would help diagnose the problem? Thanks again, Jim
January 29, 201511 yr Well if everything is installed properly the only thing I can think of is maybe defining your tun/device. openvpn --mktun --dev tun5
February 5, 201511 yr Guys Question for you. I have Private Internet access and I'm trying to get this 64-bit Client running on Unraid 6.0-beta12. I installed the plug-in successfully and then accessed Settings and then OpenVPN Client Configuration. There I have the following: Use password to login? Yes Client configuration file US East Username xxxxx Password xxxxx Start OpenvPN during array mounting No Extended Routing None The "US East" configuration file was downloaded here and placed in flash->config->plugins->openvpnclient: https://www.privateinternetaccess.com/pages/client-support/ Opening that file in Wordpad: "client dev tun proto udp remote us-east.privateinternetaccess.com 1194 resolv-retry infinite nobind persist-key persist-tun ca ca.crt tls-client remote-cert-tls server auth-user-pass comp-lzo verb 1 reneg-sec 0 crl-verify crl.pem" I reboot Unraid and now the Main OpenVPN Client Settings page shows "US East" as the config file. I hit the Start button and it says "Starting Openvpn Tunnel: Please Wait" but then goes to saying "Not Connected" and it doesn't start. Any ideas?? Thank guys!! Jim Ok where did you place your PIA config files? Did you make an openvpn folder in the boot directory? If not make one and place your CA and any config files in that folder. When you start the plugin it should say the config file is located at /boot/openvpn/ whatever your file is named. Thanks for the note and tip. I created an openvpn folder in the boot directory and then placed the above referenced "US East" config folder inside it. Tried to start it again and same problem - won't start. Any other ideas? Anything I can show that would help diagnose the problem? Thanks again, Jim I had to remove the spaces from the files in order for this plugin to work. Try that!
February 17, 201511 yr Hello VPN experts. I'm the middle of upgrading my server and I am seeking some guidance with OpenVPN. First off this is new territory for me and I'm completely lost. I want to have a VPN setup with PIA and would like 99% of my house hold internet traffic to go through it, Unraid Server, Laptops, XBOX etc... Now I was thinking of running OpenVPN on the Unraid server but thats where I start to get confused, how do I get everything to use the VPN? So my questions [*]How is this wired? Modem-->Router-->Unraid (then somehow everything goes through OpenVPN?) or Modem-->Unraid-->Switch-->Everything else? [*]Do I need two NIC cards on the motherboard? I was looking at the ASRock Z97 Extreme6 [*]Am I better off running a DD-WRT Router instead? [*]Is security an issue with the Unraid server directly connected to the modem? Sorry for all the questions. Thanks.
February 19, 201511 yr So I have PIA and I'm trying to get OpenVPN to work. It says that logging in was successful but the status says VPN not connected and it's still my normal IP address. /etc/rc.d/rc.openvpn enable login password no no no no Writing to the plugin config file.... ca.crt USCalifornia.ovpn USWest.ovpn West.ovpn Your ovpn file already have the option --> /boot/config/plugins/openvpn/password.txt Your ovpn file was sucessed updated with --> persist-remote-ip Your ovpn file already have the option --> status /tmp/openvpn/openvpn-status.log Starting Openvpn Tunnel: wait ......... Connected sucesfuly on tun0 Assigned IP : xxxxxxxxxxxx Logging in to VPN was successful Can anyone help me?
February 21, 201511 yr My guess is you will need to run a pfsense vm. I would like to use that option as well (same mobo) when I see another unraid user install pfsense vm. Hello VPN experts. I'm the middle of upgrading my server and I am seeking some guidance with OpenVPN. First off this is new territory for me and I'm completely lost. I want to have a VPN setup with PIA and would like 99% of my house hold internet traffic to go through it, Unraid Server, Laptops, XBOX etc... Now I was thinking of running OpenVPN on the Unraid server but thats where I start to get confused, how do I get everything to use the VPN? So my questions [*]How is this wired? Modem-->Router-->Unraid (then somehow everything goes through OpenVPN?) or Modem-->Unraid-->Switch-->Everything else? [*]Do I need two NIC cards on the motherboard? I was looking at the ASRock Z97 Extreme6 [*]Am I better off running a DD-WRT Router instead? [*]Is security an issue with the Unraid server directly connected to the modem? Sorry for all the questions. Thanks.
February 25, 201511 yr Has anyone had any success in configuring Plex server to allow for remote streaming while connected to a VPN? This is one main reason why I recently stopped using OpenVPN Client. I still haven't found a good solution that will allow Plex, BTsync, Subsonic and other traffic outside of the VPN. I suppose the other option would be to setup a 2nd NIC but no one has been able to offer a good solution for that either AFAIK.
February 25, 201511 yr I wonder if this something like this would be possible on unRAID with OpenVPN Client in order to route specific traffic through the VPN and bypass the VPN for all other traffic like Plex, Subsonic etc...? # This code goes in the WAN UP section of the Tomato GUI. # # This script configures "selective" VPN routing. Normally Tomato will route ALL traffic out # the OpenVPN tunnel. These changes to iptables allow some outbound traffic to use the VPN, and some # traffic to bypass the VPN and use the regular Internet instead. # # To list the current rules on the router, issue the command: # iptables -t mangle -L PREROUTING # # Flush/reset all the rules to default by issuing the command: # iptables -t mangle -F PREROUTING # # # First it is necessary to disable Reverse Path Filtering on all # current and future network interfaces: # for i in /proc/sys/net/ipv4/conf/*/rp_filter ; do echo 0 > $i done # # Delete and table 100 and flush any existing rules if they exist. # ip route flush table 100 ip route del default table 100 ip rule del fwmark 1 table 100 ip route flush cache iptables -t mangle -F PREROUTING # # Copy all non-default and non-VPN related routes from the main table into table 100. # Then configure table 100 to route all traffic out the WAN gateway and assign it mark "1" # # NOTE: Here I assume the OpenVPN tunnel is named "tun11". # # ip route show table main | grep -Ev ^default | grep -Ev tun11 \ | while read ROUTE ; do ip route add table 100 $ROUTE done ip route add default table 100 via $(nvram get wan_gateway) ip rule add fwmark 1 table 100 ip route flush cache # # Define the routing policies for the traffic. The rules will be applied in the order that they # are listed. In the end, packets with MARK set to "0" will pass through the VPN. If MARK is set # to "1" it will bypass the VPN. # # EXAMPLES: # # All LAN traffic will bypass the VPN (Useful to put this rule first, so all traffic bypasses the VPN and you can configure exceptions afterwards) # iptables -t mangle -A PREROUTING -i br0 -j MARK --set-mark 1 # Ports 80 and 443 will bypass the VPN # iptables -t mangle -A PREROUTING -i br0 -p tcp -m multiport --dport 80,443 -j MARK --set-mark 1 # All traffic from a particular computer on the LAN will use the VPN # iptables -t mangle -A PREROUTING -i br0 -m iprange --src-range 192.168.1.2 -j MARK --set-mark 0 # All traffic to a specific Internet IP address will use the VPN # iptables -t mangle -A PREROUTING -i br0 -m iprange --dst-range 216.146.38.70 -j MARK --set-mark 0 # All UDP and ICMP traffic will bypass the VPN # iptables -t mangle -A PREROUTING -i br0 -p udp -j MARK --set-mark 1 # iptables -t mangle -A PREROUTING -i br0 -p icmp -j MARK --set-mark 1 # By default all traffic bypasses the VPN iptables -t mangle -A PREROUTING -i br0 -j MARK --set-mark 1 # Spotify explicitly uses the VPN iptables -t mangle -A PREROUTING -i br0 -m iprange --dst-range 78.31.8.1-78.31.15.254 -j MARK --set-mark 0 iptables -t mangle -A PREROUTING -i br0 -m iprange --dst-range 193.182.8.1-193.182.15.254 -j MARK --set-mark 0 share|improve this answer This code was found at this link: http://serverfault.com/questions/382498/howto-only-tunnel-specific-hosts-route-through-openvpn-client-on-tomato
February 25, 201511 yr I wanted to setup OpenVPN on my unraid box, and when i clicked the link in the first post for 64bit ( http://lime-technology.com/forum/index.php?topic=35435.msg330045#msg330045 ) it says its updated for Unraid 6, does this version work for unraid 5.X releases too?
February 25, 201511 yr I wanted to setup OpenVPN on my unraid box, and when i clicked the link in the first post for 64bit ( http://lime-technology.com/forum/index.php?topic=35435.msg330045#msg330045 ) it says its updated for Unraid 6, does this version work for unraid 5.X releases too? unRAID 5 is 32bit. unRAID 6 is 64bit. Very few things will work on both (scripts often will, executables will not). You must get the version for your version of unRAID.
February 25, 201511 yr I wanted to setup OpenVPN on my unraid box, and when i clicked the link in the first post for 64bit ( http://lime-technology.com/forum/index.php?topic=35435.msg330045#msg330045 ) it says its updated for Unraid 6, does this version work for unraid 5.X releases too? I believe the plugin system was changed between Unraid V5 & Unraid V6. If you are using Unraid V5 then use the V5 plugin, if you are using Unraid V6 then use the V6 plugin. To be honest, I know that people say you shouldn't use beta software but I know you're still setting up a new machine, I think if I were you I'd use a V6 beta, will make it far less difficult to upgrade in the very near future when V6 final is released. Having said that, I've always used the Unraid beta stuff as there is normally some new feature I just can't wait to try out.
February 25, 201511 yr I wanted to setup OpenVPN on my unraid box, and when i clicked the link in the first post for 64bit ( http://lime-technology.com/forum/index.php?topic=35435.msg330045#msg330045 ) it says its updated for Unraid 6, does this version work for unraid 5.X releases too? In the original post it reads to: DL (download) the attached plugin (32-bit), unpack it to plugin folder, then update the plugin from UI to get the latest version it it exist. Which means unRAID version 5.x The link is specifically for 64-bit, unRAID version 6.0
February 26, 201511 yr I recommend upgrading to V6.0 as well as I could not get OpenVPN to work on v5 at all.
Archived
This topic is now archived and is closed to further replies.