Raspberry Pi Forums

chairmanmao

I really appreciated the help I got from several people on this forum when I was trying to configure a VPN server on my Pi. I thought I'd "pay it forward" by sharing an article I wrote about what I learned.

https://imperfect.olbert.com/2019/05/28 ... tunneling/

Enjoy!

- Mark

chairmanmao

Thanx for the quick reply. Turns out I'd made a stupid mistake because I'd been spending hours trying to get an openvpn tap setup working -- which involves creating a bridge out of eth0 and tap0 -- and I forgot that the tun0 interface set up by openvpn when it's running in tunnel mode isn't automati...

chairmanmao

I have set up OpenVPN on my Pi3 running Stretch, in tunneling mode, on my LAN, and can access it remotely (e.g., from my iPhone). The VPN connection gets an address assigned to it from the subnet I configured within server.conf (192.168.5.0/24, in my case). The Pi also runs dnsmasq for my LAN. The L...

chairmanmao

Interesting directory structure, I may switch to that. Yes, I did reboot between attempts (thank goodness the Pi3 is so much faster than the Pi1 :)). I am able to change the tap0 MAC address from the command line by running the commands manually. For fun, I tried changing the line which sets the MAC...

chairmanmao

Thanx for the continued help. Sadly, not even the heavy-handed approach worked -- tap0 insists on setting its own random MAC address. I've worked around that by explicitly configuring br0 in dhcpcd.conf, which appears to work, so it's not that big a deal. But it would be nice to be able to rely on t...

chairmanmao

Can't say I understand what's going on yet, but at least I've been learning stuff about configuring network interfaces that I never understood :) I have a configuration that appears to be working "locally", meaning that devices on my LAN have internet access, and DNS resolution via dnsmasq is workin...

chairmanmao

I'm posting this as a separate entry just to keep things clear (to me :)). I'm having trouble getting the right IP addresses assigned to the right interfaces. tap0 ends up coming up with a 169.x.x.x address, which I recognize as "no IP address assigned so you get a default one". tap0 is being create...

chairmanmao

I tried to delete this post but found I was unable to do so, so I've just deleted the content (I made a dumb mistake in applying your instructions).

chairmanmao

Back again... :) Here's the output from "ip a" when the openvpn service is running and I don't have internet connectivity: 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000 link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 inet 127.0.0.1/8 scope host lo ...

chairmanmao

Apologies in advance for the length of this. As I'm not sure what's causing the problem I've included info on things I think may be playing a role. I am trying to set up a Pi3 as an OpenVPN server on my home LAN, in bridge mode so that I can access network resources and devices remotely over the int...

chairmanmao

Wise guy :) Yes: I learned that there are a number of aspects to upgrading the Pi which could be much smoother, and better disclosed from within the process itself. In addition to the "running out of space because of wolfram-engine" problem, there was also the "reset the boot process so it goes into...

chairmanmao

I didn't say that I hated it, just that it's not what I'd call a core capability. You're right, though, that the Foundation gets to decide what they put in their distro. But I'm also free to suggest ways they could improve it, and to point out where I think they've missed the mark. Contributing to m...

chairmanmao

Understood. But, personally, I would prefer "big things not needed for general purposes" not be installed by default.

Apologies about your name. I missed the subtle distinction

chairmanmao

Fair point, pythagoras, but when I read the entirety of the linked page it's pretty clear "education" is much more than "mathematics". In fact, I could use that charter to require every single package on the planet be included in the standard distro, since they all help educate people, by enabling n...

chairmanmao

That makes the most sense, even if it's speculation

. Particularly since, as you point out, it's not available for free on all platforms.

Oh well, most learning takes place by beating one's head bloody against previously-unseen walls

chairmanmao

That almost makes sense, although I'm not sure about the basic mission argument. I was under the impression the Foundation's mission was much broader than just education.

chairmanmao

Because I didn't realize how honking HUGE it was going to be before I started the upgrade. And that's not my question. Which is, to repeat, >>why is it in the core distro in the first place<<? There are >>tons<< of packages that are not in the core distro. Why this one, which many people have compla...

chairmanmao

Okay, so I'm a slow learner, currently stuck waiting, for the second time, for my wheezy to jessie upgrade to crash because I don't have enough space left on my SD card to install the new wolfram-engine. Once I get back control of my pi -- the disk is showing as 100% full, but the upgrade is still d...

chairmanmao

I am accessing a Samba share on my Pi2 from Windows 10. The read speed, as determined by LAN_SpeedTest.exe, is >>very<< slow, roughly 300 - 600KB. The write speed, while higher, is also still slow. Running iwconfig on the Pi2 showed that the wifi bit rate was 150M bits/second, which should easily su...

Search found 19 matches

Installing OpenVPN on a Pi

Re: Letting OpenVPN subnet see my LAN

Letting OpenVPN subnet see my LAN

Re: OpenVPN in bridge mode: internet connectivity lost

Re: OpenVPN in bridge mode: internet connectivity lost

Re: OpenVPN in bridge mode: internet connectivity lost

Re: OpenVPN in bridge mode: internet connectivity lost

Re: OpenVPN in bridge mode: internet connectivity lost

Re: OpenVPN in bridge mode: internet connectivity lost

OpenVPN in bridge mode: internet connectivity lost

Re: Why Is wolfram-engine included?

Re: Why Is wolfram-engine included?

Re: Why Is wolfram-engine included?

Re: Why Is wolfram-engine included?

Re: Why Is wolfram-engine included?

Re: Why Is wolfram-engine included?

Re: Why Is wolfram-engine included?

Why Is wolfram-engine included?

Very Slow WiFi