On Sun, 23 Jul 2023 09:43:54 +0000 (UTC), Jason Long via Openvpn-users
<openvpn-users@lists.sourceforge.net> wrote:

>Hello,
>Is it possible to run multiple OpenVPN server on one NIC? Or each OpenVPN 
>server profile needs a separate NIC?
>

On my VPN servers (I run such a server on each network where I have RPi devices
running so I can reach them) I always install OpenVPN with two services active:

1) One uses UDP port 1194 and implements a full VPN server which can be used to
let the clients enter the Internet from the location of the server to disable
geolocation of certain services. This is what public VPN services also do.

2) And the other is using UDP port 1195 and is configured to only allow clients
to access the LAN on which the server itself runs. All other accesses will be
handled by the client's own gateway. This is a so called "split tunnel" setup,
which I use when I only want to reach the devices on the remote LAN but keep my
own Internet gateway for everything else.

The OpenVPN services bind to all network interfaces of the VPN server device but
the access from outside uses port forwarding on the router and here a specific
target IP (local IP) is specified with the target local IP of the port forward
as well as the port to use.

So in the client's OVPN file the server is specified not by an IP address but a
DNS name for the Internet connection of the router. This is updated by a dynamic
dns service to point to the actual router's external address.

Your question regarding the NIC is not making any sense to me, any NIC on the
server will be used, the only thing is that you must make sure that the incoming
calls to the router's external address are fowarded to the correct internal
address of the OpenVPN server device itself. And this also specifies the port to
handle...

One forward rule for each service you enable.

And on the OpenVPN server device you will have to add the proper IPTABLES
settings to make the forwarding work.

HTH


-- 
Bo Berglund
Developer in Sweden



_______________________________________________
Openvpn-users mailing list
Openvpn-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-users

Reply via email to