Re: [Openvpn-users] Multiple VPN instances - How To?

[Ed Wallig <ilinktech@xxxxxxxxx>]

OK, looks like I still need some assistance. I was able to get two instances of OpenVPN up on my server (one using UDP, one using TCP) but that's where the joy ended. My UDP-based instance is working great (except for the issue from the previous message). My TCP-based instance will allow me to connect but I can't route any traffic (including PING) over the connection.

 

The firewall is off on the VPN box and I've added the same type of port forwarding rules (on my perimeter firewall) for the TCP-based instance ass I have for my UDP-based instance. I changed the port number to 1195 in case that was the issue but no changes.

 

I've included part of my conf file below - other than the change in protocol and port it is identical to the UDP-based conf file:

 

port 1195

 

# TCP or UDP server?

proto tcp

dev tun

ca /etc/openvpn/keys/ca.crt

cert /etc/openvpn/keys/server.crt

key /etc/openvpn//keys/server.key

dh /etc/openvpn/easy-rsa/keys/dh1024.pem

 

server 10.8.0.0 255.255.255.0

ifconfig-pool-persist ipp.txt

push "route 192.168.10.0 255.255.255.0"

push "route 192.168.5.0 255.0.0.0"

keepalive 10 120

 

tls-auth /etc/openvpn//keys/auth.key 0

replay-persist /etc/openvpn/rp

cipher AES-128-CBC # AES

comp-lzo

max-clients 10

user nobody

group nobody

 

persist-key

persist-tun

 

 

Anyone have any idea why I can't pass traffic? I ran Ethereal on a connecting client, no ACKs coming back to the client.

 

 

Thanks...

 

Ed Wallig <ilinktech@xxxxxxxxx> wrote:

Hi,

 

Running OpenVPN 2.01 on a CentOS 4 server and have been very happy with it. However, ran into a problem with FTP when using the VPN over a SatCom BGAN system; the ftp client connects w/o issue but file downloads fail. When not using the VPN, FTP works fine over the BGAN and when using the VPN on a "land line" the FTP client works fine so it's something about the combination of BGAN, VPN, and FTP that does not work. Other applications that I am using over the VPN (IM, etc) are working fine.

 

I'm using UDP and would like to try TCP in this case to see if the problem goes away. However I do not want to switch my entire user-base over to TCP (about 30 users) if I do not have to. I understand that multiple VPN daemons can be run with different configurations but I am unfamiliar with how this is done - can anyone provide information or point me at some specific documentation on how to run multiple instances of OpenVPN?

 

Thanks

---

Get amazing travel prices for air and hotel in one click on Yahoo! FareChase

---

Yahoo! Messenger with Voice. PC-to-Phone calls for ridiculously low rates.