VPN

[martywms]

Hello, complete newbie here. I cannot get the VPN to work. I am assuming I should see some sort of process running on the server if OpenVPN is running. Is that correct? I'm not sure what I should be seeing on the server. After I installed Fedora and Amahi, I didn't see OpenVPN on the server at all. So I installed it following this process: http://allnightburger.com/how-to-setup- ... on-fedora/. I don't see any process running on the server, and I'm not sure if I should be doing something with certificates. Any help would be appreciated. Thanks.

[bigfoot65]

You will need to install openvpn App.

I believe there is a convenience fee. Log into amahi.org to purchase, then it will show up in your Available Apps list on the HDA.

See OpenVPN guidance in the wiki for further guidance.

[martywms]

Thanks, bigfoot65. I'm just now getting around to working with this again. I downloaded and installed OpenVPN server, and now I appear to be successfully connecting via VPN. (The HDAConnect GUI says I'm connected.) However I still cannot access a drive that I have shared on my server when connected via VPN. Any thoughts? I saw a comment somewhere about the VPN not being able to forward packets correctly if your HDA network is 192.168.1.* and the network you are connecting from is also 192.168.1.*. Could that be my problem? If that is the problem, I would assume a lot of folks encounter that. Thanks for your help.

[bigfoot65]

I saw a comment somewhere about the VPN not being able to forward packets correctly if your HDA network is 192.168.1.* and the network you are connecting from is also 192.168.1.* Could that be my problem?

Likely. See OpenVPN Troubleshooting guidance.

[martywms]

Thanks bigfoot65. I see on the troubleshooting page that is says "Make sure your HDA's network IP range is different than that of the remote network. (e.g. if your HDA's IP address is 192.168.1.X, you cannot connect to it on a remote network also using 192.168.1.X)". However, I'm not sure what my options are here. My home network is definitely configured this way. I'm not sure how I can reconfigure my HDA to avoid this problem. I'm not readily seeing the solution on the troubleshooting page. Any guidance you can provide or point me to? Thanks!

[bigfoot65]

Most routers allow you to change the network address. You could make it something like 192.168.9.1 and then make the same change on the HDA.

See the HDA Admin How To wiki page.

Chances of you using an outside network with that range is unlikely.

[martywms]

Well, I changed the IP address of my network and my HDA. However, when I log into my console at Amahi.org, it still shows the prior network address, HDA address, and gateway address. I believe I saw on another forum entry that this may not be a problem. But when I run the OpenVPN Tester, I get to the "Inactive...enable it" message. And when I select that, I go to the OpenVPN Wiki. The openvpn processes do appear to be running on the server. I also changed the references to the network IPs in the amahi.conf file on the server. I also read a note saying that the OpenVPN Tester is not always accurate. So I connected to another network, and no joy. I got the TLS handshake failed thing. Not sure what to troubleshoot next. Thanks.

[bigfoot65]

Did you check out the prevent SSL handshake timeouts in OpenVPN guidance?

[martywms]

I'm still not connecting to the VPN. I was connecting the other evening before I changed my network IP and HDA IP, but I couldn't access a shared drive. We thought that might have been because the address of the network I was connecting from was the same as the address of the network I was connecting to. I ended up reinstalling Fedora 23 and Amahi. I did change my network address. I'm using 192.168.168.1. I don't know what else to try. The OpenVPN Tester doesn't work, and I also can't connect from another network. I did follow the procedure you sent for dealing with the handshake issue. I'm wondering if my port forwarding is correct. Here's what I implemented:
Networked Computer / Device --> 192.168.168.10:1194
Applications & Ports Forwarded --> Destination Ports 1194, UDP 1194->1194
WAN Connection Type --> All Broadband Devices
Status --> Active
Appreciate your help!

[bigfoot65]

Applications & Ports Forwarded --> Destination Ports 1194, UDP 1194->1194

There might be a firewall blocking access. Your ISP also could be blocking the port, but there's a work around as documented in the blocked port 1194 wiki guidance.

The OpenVPN Tester doesn't work

This does not always work as designed. I have seen it not work for some, but OpenVPN did.