Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    [SOLVED] Use OpenVPN TUN as TAP?

    Scheduled Pinned Locked Moved OpenVPN
    17 Posts 3 Posters 3.7k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • M
      m4f1050
      last edited by

      I configured my TUN, I can connect, it has a 192.168.75.0/24 network, but I can't access my LAN which is 192.168.25.0/24 and I don't think I can add routes on my unrooted Toshiba Excite 10.

      1 Reply Last reply Reply Quote 0
      • D
        doktornotor Banned
        last edited by

        Well, then you are doing it wrong. Impossible to advise without any information whatsoever on the configuration.

        1 Reply Last reply Reply Quote 0
        • M
          m4f1050
          last edited by

          Server Mode: Peer to Peer ( SSL/TLS )
          Protocol: UDP
          Device Mode: tun
          Interface: WAN
          Local port: 1194
          Peer Certificate Authority: M4F1050-CA 
          Server Certificate: FIREWALL (CA: M4F1050-CA) *In Use M4F1050 (CA: M4F1050-CA) 
          DH Parameters Length: 1024 bits 
          Encryption algorithm: AES-128-CBC (128-bit)
          Hardware Crypto: BSD cryptodev engine - RSA, DSA, DH, DES-CBC, DES-EDE3-CBC, AES-128-CBC, AES-192 …   
          Certificate Depth: (Client+Server)
          IPv4 Tunnel Network: 192.168.75.0/24
          IPv4 Local Network/s: 192.168.25.0/24
          Concurrent connections: 10
          Compression: Compress tunnel packets using the LZO algorithm. 
          Type-of-Service: Set the TOS IP header value of tunnel packets to match the encapsulated packet value. 
          Duplicate Connections: Allow multiple concurrent connections from clients using the same Common Name.  NOTE: This is not generally recommended, but may be needed for some scenarios.

          1 Reply Last reply Reply Quote 0
          • D
            doktornotor Banned
            last edited by

            Where's "IPv4 Local Network/s"?

            1 Reply Last reply Reply Quote 0
            • M
              m4f1050
              last edited by

              @doktornotor:

              Where's "IPv4 Local Network/s"?

              192.168.25.0/24

              1 Reply Last reply Reply Quote 0
              • D
                doktornotor Banned
                last edited by

                OMG. Make a screenshot. Not interested in reading perpetually edited post.

                1 Reply Last reply Reply Quote 0
                • M
                  m4f1050
                  last edited by

                  Here is a screen shot.

                  tun_settings.jpg
                  tun_settings.jpg_thumb

                  1 Reply Last reply Reply Quote 0
                  • D
                    doktornotor Banned
                    last edited by

                    Peer-to-Peer is for site-to-site connection. Cannot see what are you trying to do here with the Android phone.

                    1 Reply Last reply Reply Quote 0
                    • K
                      kejianshi
                      last edited by

                      I'm going to sort this later on team viewer…

                      1 Reply Last reply Reply Quote 0
                      • M
                        m4f1050
                        last edited by

                        Actually I already did.  I had forgotten to open up UDP port 1195 on my modem, stupid me!  At first I changed the 1194 OpenVPN setting to TUN from TAP but since I couldn't get it to work at first I created a 2nd OpenVPN server (1195) and I never opened the port.  I'm using the TUN as a "TAP" on my Excite 10.  I can now see the local network (LAN) on my pfSense from my Excite connected via OpenVPN Connection (non-root)

                        1 Reply Last reply Reply Quote 0
                        • K
                          kejianshi
                          last edited by

                          Thats good - Now you are like everyone else.  Boring huh?

                          1 Reply Last reply Reply Quote 0
                          • M
                            m4f1050
                            last edited by

                            @kejianshi:

                            Thats good - Now you are like everyone else.  Boring huh?

                            LOL… I know right..?  I wanted to play with VoIP next...!  >:- )

                            1 Reply Last reply Reply Quote 0
                            • K
                              kejianshi
                              last edited by

                              VOIP - Yippie!  That never causes anyone hardship.  :P

                              1 Reply Last reply Reply Quote 0
                              • K
                                kejianshi
                                last edited by

                                If you are going to run a SIP server, remember to forward port 5060 OK?  I read some places it helps.

                                1 Reply Last reply Reply Quote 0
                                • First post
                                  Last post
                                Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.