Command Line OpenVPN client config

[bja...@jamesgang.dyndns.org]

I'm trying to get a headless box setup to go through a VPN tunnel to my
server. The server is setup to use OpenVPN (and vpn is known good)

every guide I've seen points to using Network-Manager, which since this is
headless won't work. Does anyone know how to setup a tunnel using
Password With Certificates?

Also after the connection is created, how do I get it to connect on reboot?

[dragon]

What distro Brian?

Dragon

> --
> You received this message because you are subscribed to the "La
> Crosse Linux Users Group" on Google.
>
> To visit our web site, go to http://www.lclug.org
>
> To post to this group, send email to lacro...@googlegroups.com
> To unsubscribe from this group, send email to
> lacrosselug...@googlegroups.com For more options, visit this
> group at http://groups.google.com/group/lacrosselug?hl=en

[bja...@jamesgang.dyndns.org]

Replying to myself, I did x-forwarding and just installed Network manager
to get the VPN setup, now however ALL of my traffic is going over the
tunnel after it's setup.

Here's a basic layout of what I have:

Remote server in Chicago is mail server, backup server and public facing
FTP server due to higher bandwidth.

I want the remote server to VPN back to a local server so that on the
local network it is addressable on the internal network (say it has an
address of 10.8.0.6) and then nightly a script will go and rsync data from
local server to the remote.

The problem irght now is that if I open the VPN connection external
connections stop, so no one can FTP into the box, and SMTP connections (as
well as webmail) get refused because the system is no longer listening on
the external address

If it matters the server is Ubuntu 10.04.3 LTS

[Tim Holum]

Do you have any "route x.x.x.x x.x.x.x" in your client config, or any "push route x.x.x.x x.x.x.x" in your server config

It has been a few years since I have used openvpn, But I From what I remember that is how you would tell trafic to go over the tunnel

The other issue would be if your local ip range is the same as your tunnel ip range

--
____________________________
Tim Holum
608.406.0226
tho...@couleetechlink.com
http://www.couleetechlink.com

--

Any Support Requests should be sent to help...@couleetechlink.com to ensure they are handled in a timely manner

[bja...@jamesgang.dyndns.org]

Thanks Tim,your route suggestion was just the thing. Since I was using
Network Manager it was dead easy:

Went into the VPN tab
Edited the VPN connection
on the IP V4 tab there's a Routes button
In that window there's a tick box for "use this connection only for
resources on this network"
ticked that and connected to VPN, everything was beautiful.

> help...@couleetechlink.com<+help...@couleetechlink.com>to ensure

> they are handled in a timely manner
>