Koozali.org: home of the SME Server
Obsolete Releases => SME 8.x Contribs => Topic started by: crazybob on February 08, 2016, 06:17:12 PM
-
I have openvpn bridge on SME8, and it works flawlessly. one of the people want to use an iPad.
I have googled on how to do it, and I am to the point that it will try, but not connect.
If I tell it to use tap, the complains that it does not use tap. I change the profile to tun, then it times out.
I am using the app from itunes for openvpn. I have included the ca cert in the profile they require, I have add the information per the contrib in the wiki.
Am I missing something?
TIA, Bob
-
OpenVPN won't work in bridged mode with iOS devices--you need to use routed mode instead. See https://wiki.contribs.org/OpenVPN_Routed for a contrib for this.
-
is it possible to run both at the same time?
-
Yes (as long as they bind on different ports)
-
I have both OpenVPN Bridged and Routed on my SME, bound to ports 1194 and 1195 respectively. Windows & Linux devices use Bridged. Android and IOS devices use Routed. Works well.
-
Thanks for the fast responses.
I will be trying soon.
-
I have both OpenVPN Bridged and Routed on my SME, bound to ports 1194 and 1195 respectively. Windows & Linux devices use Bridged. Android and IOS devices use Routed. Works well.
Could you please craft up a wiki page on your setup please? I'll assist in formatting, a plain text dump would be fine.
TIA
-
Could you please craft up a wiki page on your setup please? I'll assist in formatting, a plain text dump would be fine.
TIA
Actually, I followed the existing wiki articles to install both versions. No deviation was necessary.
-
Thanks for the pointer. Works great.
-
I thought I had it working. It connects, but I cannot actually access the server. I have set the config to tun, and changed the port to 1195 in he ovpn file as well as in the vpn server, but looking at the ipad, it says it is using tap, and port 1194.
this it the file I am using (with the contents of the ca.cert removed, and the remote address blanked out
proto udp
dev tun
nobind
# Uncomment the following line if your system
# support passtos (not supported on Windows)
# passtos
remote xxx.xxx.com
tls-client
ns-cert-type server
# Replace user.p12 with the certificate
# bundle in PKCS12 format
pkcs12 Joe.p12
<ca>
-----BEGIN CERTIFICATE-----
-----END CERTIFICATE-----
</ca>
# You can replace the pkcs12
# directive with the old ones
#ca cacert.pem
#cert user.pem
#key user-key.pem
mtu-test
comp-lzo
pull
Does anyone know a source of a good ovpn config file to use with the ipad?
thanks
-
Off topic, but we all should consider to update to 9.x