Anybody use OpenVPN server on Windows

IAmATeaf

IAmATeaf

Known around here
Jan 13, 2019
3,373
3,357
United Kingdom
Spent some time setting up an OpenVPN server on a Windows 10 desktop. Got the server configured, setup port forwarding and got a connection established on my iPhone but .....

I couldn’t find a way to have OpenVPN running all the time without logging on, starting the OpenVPN GUI and then clicking connect to get the server running. This last bit can be done via a command line but the user would then need to be left logged on.

It does have a service which I started but I then can’t establish a connection unless I do the above.

Can’t leave the desktop logged on as I run it headless so would rather not do so and this would cause an issue should it be restarted.

All in all a frustrating day so any hints and tips would be greatly appreciated.
 
  • Like
Reactions: adamdylan
Gave up on using OpenVPN as a server. For a product that I want to introduce for additional security I'm not happy with being reliant on a user always being logged in and if I want to use a specific username/password then I have to add the details to a plain old text file and store in the installation folder.

The hunt goes on for something more appropriate.
 
  • Like
Reactions: adamdylan
IAmATeaf said:
All in all a frustrating day
Click to expand...

I think you did pretty well for getting it running in a single day. I've almost got mine going after several days and yes it was painful. I hope to have it completed properly soon.
I've got a few friends that I'm helping out and they are not in a position or willing to change over their router. I've configured OpenVPN a while ago on my Netgate PFSense box and it was far easier.
 
  • Like
Reactions: adamdylan and IAmATeaf
catcamstar said:
Hi,

I can't image this is not working. Have you followed the instructions on Running OpenVPN as a Windows Service | OpenVPN

On the other hand, having a stand-alone pc (without any other valuable software running in "server" mode) running for OpenVPN only, I would look into running the OpenVPN on your ASUS router, ER-X or even raspberry pi.

Hope this helps!
CC
Click to expand...

Yep, been there, done that and even got the t-shirt

That service just exits with a meaningless error message in the event logs, there are no log files created so from what I saw it never even got as far as trying launch the main executable. I then did a goggle and found loads of other posts where it was suggested that I either launch it when the user logs on or I create a scheduled task to launch it when the user logs on. Out of curiosity I also tested this and it works but the minute you change the scheduled task to run on system startup it fails.

Gave up at this point. It clearly looks like the service wrapper has a bug, not too sure when it will fixed so I just saved the config files and uninstalled as it was doing my head in.
 
  • Like
Reactions: adamdylan
This is only my opinion so please accept this post as a well meaning response to your messages.

I think you are doing OpenVPN a dis-service by not following the multitude of instruction pages provided on VPN Software Solutions & Services For Business | OpenVPN

I will try and lend assistance in the particular issue you have reported but this information is provided here:
https://openvpn.net/community-resources/running-openvpn-as-a-windows-service

Create a server .ovpn file and place in:
C:\Program Files\OpenVPN\config

Make sure this ovpn file works correctly by testing it using the interactive program OpenVPN GUI (Run it with admin rights).
Log file for the GUI program is here:
C:\Users\{user-name}\OpenVPN\log

When you know the ovpn file works correctly, run it as a service:
Open services.msc
Set the OpenVPNService as StartUp Type = Manual
Then start the service.
If you have this line in your ovpn file: log openvpn.log
Then the log file will be here:
C:\Program Files\OpenVPN\config

Check OpenVPN is working correctly. (hint, use the 'OpenVPN Connect' app on mobile phone. Disable wifi so you are using mobile data (i.e. your network internet connection not your local wifi). This is ensure you can connect to OpenVPN 'out and about' rather than just when at home.

Now you can set the OpenVPN service as Startup Type = Automatic (Delayed Start)
(I use delayed start as found OpenVPN was being started too early when PC rebooted)
This means the OpenVPN service will run at PC start, not just when someone has logged in.
You may wish to edit the PC power options to prevent it going to sleep or hibernating.

In your router that connects to the internet (ISP) do this:
Disable UPnP (not necessary for OpenVPN but always best to do).
Direct the OpenVPN port (as specified in your ovpn file) to forward to the IP of your OpenVPN server machine.
That is the IP your PC uses on your local network (the same as is included on your ovpn file).
Ovpn file line: local {local ip number}
My ISP blocks the default port 1194, so I picked a port between 49152-65535.
Ovpn file line: port {port number}

Your ISP probably changes the IP you use 'on the internet' occasionally. For you to connect home you need to know what IP your home is connected to. To find the present IP, Google 'whats my IP'
For a permanent solution, use a Dynamic DNS service such as noip.com
I believe this site provides a free DDNS service here: IPCT DDNS | IP Cam Talk

Good Luck!
 
  • Like
Reactions: TheDank, adamdylan, catcamstar and 1 other person
I’ve done most of that, using the GUI I had it connected/running and tested it by connecting from my phone. So all the required configs were in place.

The only real issue for me was trying to get it running as a service.

I’ve saved all the config files so I might revisit it at some stage, maybe I have missed something. At the moment I’m looking at using the built in VPN service within Windows, so will have a play around with that. Have configured the server, just need to find a suitable client that will work on IOS.
 
  • Like
Reactions: adamdylan
When I initially configured OpenVPN, on the first occasion I right clicked on my server configuration file (server.opvn) and started it with the 'start OpenVPN on this config file'. Once I confirmed it was operational, I got it working as a service without any problems and I didn't have to do anything fancy, I just set the OpenVPN service to 'Automatic' and started it. I rebooted my machine and confirmed it started ok and I connected ok. I didn't use the GUI at all but the 'OpenVPN GUI' is visible in the system tray when I restarted the box.

There's documentation in various places, I also found this helpful - Easy_Windows_Guide – OpenVPN Community
 
  • Like
Reactions: adamdylan
Hi Guys

Noticed this post was a few months old so hope I don't mind my qs

I would be grateful for any help or direction, have a cafe and will be installing BI /card payment machine and access point for customer wifi
have pc and netgear switch for the pc/cams. ISP will be changed every year or so

Want to access BI remotely and was looking at using windows access

So,,, I would be vv grateful if you could point me in the direction of the easiest and most straightforward? way to set up a secure remote access that I don't need to config every time isp is changed.

Thanks

Adam
 
  • Like
Reactions: Rick daVida
adamdylan said:
Hi Guys

Noticed this post was a few months old so hope I don't mind my qs

I would be grateful for any help or direction, have a cafe and will be installing BI /card payment machine and access point for customer wifi
have pc and netgear switch for the pc/cams. ISP will be changed every year or so

Want to access BI remotely and was looking at using windows access

So,,, I would be vv grateful if you could point me in the direction of the easiest and most straightforward? way to set up a secure remote access that I don't need to config every time isp is changed.

Thanks

Adam
Click to expand...

Please consult your original post in the VPN thread :)
 
Olddawg said:
I ended up buying a raspberry pi 3+ and installed piVPN. PiVPN: Simplest setup of OpenVPN It has worked great for me.
Click to expand...

Thanks OldDawg. You've just saved me the last bit of hair I have left.

I've been banging away at this VPN thing for a few weeks now and getting nothing more than annoyed.

Grabbed a spare 3b+ and got the whole thing (just about) running using the instructions in your link. Any problems / erros were down to my lack of nerdness.

Definitely worth a try folks, AND it's cheap.
Rick
 
  • Like
Reactions: Olddawg, Philip Gonzales and adamdylan
catcamstar said:
Psssht, don't share those secrets with the "I-love-Windows" club :p
Click to expand...

Seriously I AM a Windows guy, but I understand where it's just not the best solution and something like a dedicated OpenVPN server, where you just interface it through a browser, is definitely one of those cases. I can Google my way through a Linux installation and setup. It's worth the effort in the long run.
 
  • Like
Reactions: catcamstar
Rick daVida said:
Thanks OldDawg. You've just saved me the last bit of hair I have left.

I've been banging away at this VPN thing for a few weeks now and getting nothing more than annoyed.

Grabbed a spare 3b+ and got the whole thing (just about) running using the instructions in your link. Any problems / erros were down to my lack of nerdness.

Definitely worth a try folks, AND it's cheap.
Rick
Click to expand...
Also forgot to mention I use DYNU for my dns and keep it up to date. They have an update client for the pi here. Dynu
 
Last edited:
I've had openvpn running on my own server (ubuntu 14.04 then 16.04) running for years. I set one up on a pi with raspbian last year for my father in law.
Zero issues bar me forgetting to update the certificates, and both were set up in under an hour (including installing the OS) so I'd have to guess the problems people are having are related to the OS rather than the software.
 
  • Like
Reactions: catcamstar
RoysWing said:
So after I buy a raspberry pi 3+ and install piVPN......What happens next to use this with my new Dell camera server?
Click to expand...

Assign the Pi a static IP and connect it to your network. On your router you need to setup a port forwarding rule to forward UDP 1194 to the IP of your Pi. On your remote device, you run an OpenVPN client and then you can open a remote connection to your camera server, or any machine on your network that allows remote connections.
 
RoysWing said:
So after I buy a raspberry pi 3+ and install piVPN......What happens next to use this with my new Dell camera server?
Click to expand...
There are some good videos on youtube for piVPN. Here is one

As Shark92651 mentioned assign static address and setup port forwarding.

Once the installation process is complete create client keys. This is done easily by typing:
pivpn add

I access my cameras remote using my iphone and the OpenVPN iOS app. Just add the client you created. If you want to access the camera server from another PC install OpenVPN and use a client. Community Downloads | OpenVPN

For remote access you will also want to setup a DDNS for when your router changes ip addresses. There are several free services. I use DYNU, They have a client you can add to your raspberry pi to automatically update the ip change.
 
Last edited:
  • Like
Reactions: catcamstar and c hris527
You must log in or register to reply here.
Top Bottom