8
votes
Does Raspberry Pi 4 processor support AES-NI instructions?
The Raspberry Pi 4 does not have cryptographic extensions, to be more precise it has, but to be enabled would require HW changes alongside paying a license to Broadcom/ARM.
Here's the link for a ...
7
votes
How to bridge an access point with a remote network by Wireguard? (with the use of systemd-networkd)
You like to replace the OpenVPN server from my example (1) with Wireguard as shown on the schema in the question. You also want to have a bridged virtual private network to have both remote private ...
6
votes
Accepted
Cannot connect to PiVPN Server from WAN but can connect through LAN
Info: To have a simple openvpn server installation for reference look at Simple openVPN with static keys.
The first idea seeing the picture was that you confused WAN- and LAN-address. But lets look ...
6
votes
Accepted
Raspberry Pi as OpenVPN Access Point
I don't know something about AWS VPC. But because it seems to be only a routing problem I will use openVPN for reference. For routing it should not be make a big difference. I will try to be as ...
6
votes
Wireguard "Unknown device type" "Protocol not supported"
According to a comment on r/Wireguard, this error is caused by having the wrong kernel headers:
dkms packages (wireguard-dkms this time) need kernel headers for
current kernel you have loaded (uname -...
5
votes
Unable to apt-get update but connected to internet?
You could also try and ping 8.8.8.8 to see if you are actually able to get packets out to the internet. If you are then check your DNS settings as per
cat /etc/resolv.conf
You would expect to see ...
5
votes
Accepted
OpenVPN speed and security
The speed could be limited in multiple ways by including one/some bottleneck(s):
WiFi itself being limited
The Pi's internet connection is slow, or...
limited via interface bandwidth..
or the Pi ...
5
votes
Accepted
Wireguard installation
I do not follow the link you have given, tl;dr. But it seems that it uses the method to download WireGuard from the Raspbian testing version Bullseye and install it on the current Raspbian stable ...
4
votes
Accepted
OpenVPN as a background process
There is a debian-way of running OpenVPN, which is a lot easier than trying with different scripts on your own.
When you install openvpn using the package manager (apt), like:
sudo apt-get install ...
4
votes
Accepted
Raspberry Pi 3 How to connect to work VPN
You need a VPN client running on the Raspberry Pi to be able to connect to your work VPN. One of the most common clients is the Cisco AnyConnect client. There is a version for Linux that seems to ...
4
votes
Accepted
OpenVPN on Raspberry Pi stopped working (no tun0)
Not all information about OpenVPN is logged to /var/log/syslog. You can view this information if you run the process manually.
First, stop the OpenVPN service:
sudo systemctl stop openvpn
Then, try ...
4
votes
Accepted
Clients cannot connect to pivpn server anymore
Well I found the solution for me - hopefully it helps you too!
Found that /var/log/openvpn.log on the RPi had the line "VERIFY ERROR: depth=0, error=CRL has expired"
Searching that gave several ...
4
votes
How to convert a Layer 3 VPN to a Layer 2 VPN?
First some general information to get an idea what to do. As you already have found there are in general two ways to configure a Virtual Private Network: a bridged setup on OSI Layer 2 and a routed ...
4
votes
Accepted
Does Raspbian keep a security log file, and what is its location?
The Raspberry Pi OS uses systemd, so you will find logs in its journal. It also contains the logging from the OpenVPN server. Look at it to the current boot with:
rpi ~$ journalctl --boot=0 --pager-...
3
votes
Accepted
VPN + IP Route headaches
Change the vpn configs to both have dev tun and change your iptables to use:
*mangle
:PREROUTING ACCEPT
:INPUT ACCEPT
:FORWARD ACCEPT
:OUTPUT ACCEPT
:POSTROUTING ACCEPT
COMMIT
*raw
:PREROUTING ACCEPT
...
3
votes
Accepted
OpenVPN won't start on boot (OSMC)
It looks like changing all the ".ovpn" files instead to use ".conf" extension worked. Not sure why that is. E.g.:
sudo openvpn --config /etc/openvpn/Netherlands.conf
3
votes
What is the simplest way to securely access my Raspi from internet?
Using ssh to securely access your Raspbery Pi
ssh is a client that interacts with ssh servers. OpenSSH is used on many Linux distributions to act as the server.
Installing openssh-server
Really, ...
3
votes
Using 'Network Manager' for Wireless & VPN Management
I'm also fairly new to using the RP. I ran into the same problem using a wired network connection. I edited my /etc/network/interfaces file and removed the line "iface eth0 inet dhcp" and rebooted, ...
3
votes
Accepted
Route wifi AP traffic(wlan0) to tun0 (openvpn) and keep eth0 unaffected for LAN SSH
Brdging an access point together with a wired ethernet interface is possible but connect to a local network with internet access together with using a vpn tunnel is a routing problem. So you can only ...
3
votes
Is Forticlient VPN available for Raspbian OS?
I use openfortivpn too.
install with:
apt install openfortivpn
start with:
sudo openfortivpn [forticlienthost] --username=[user]
3
votes
Accepted
How to bridge an access point with a remote network by openvpn?
Example for this setup:
bridge ┌──────────┐ bridge
┌───────┐ vpn-tunnel │ │...
3
votes
Accepted
Connecting Raspberry Pi to 2 separate networks
First of all: very good explained question. But it is a sophisticated setup. And just to answer your question: yes, it is needed to setup special static routes on several devices.
But it is very ...
3
votes
Accepted
SSH into Raspberry Pi connected to OpenVPN
The problem is with the routing. You try to connect from remote to the PI, but the return packets are routed through the VPN. The port forwarding might work, you have to find out where it goes wrong.
...
3
votes
Accepted
Setting up Bridged VPN using: RPi 3G Hotspot router + openvpn client to connect to home RPi OpenVPN server
Having a remote OpenVPN server at your home and connect to it with the RasPi is a good solution if you cannot use port forwarding on the modem. Here is an example setup for what you have described:
...
3
votes
Accepted
Is there a way to keep a VPN connection permanent after shutting down?
We don't know anything about your log in commands but you can put this commands into a shell script. This is basic bash programming and you will find millions of tutorials how to do it.
If you have ...
3
votes
Preventing DNS Leaks on Raspberry Pi VPN Router
Try this
sudo nano /etc/dnsmasq.conf
My internet is connected via eth0 then theres a vpn connection turned on
interface eth0
static ip_address=192.168.1.80/24 # Static ip for your rpi
static ...
3
votes
Wireguard installation
@Ingo has the correct answer - it seems better than other solutions around the Internet at the moment advising to add the Debian-unstable repository.
I encountered a few issues while running through ...
3
votes
Wireguard "Unknown device type" "Protocol not supported"
I haven't followed the tutorial you used but wireguard is heavy under development and there are some outdated installation tutorials on the web. Try this Wireguard installation that uses an official ...
2
votes
Accepted
Using Raspberry Pi as a Tunnelbear sharing device
You just need to turn your Raspberry Pi into a router, then the traffic to Internet will be routed by your Raspberry Pi via the VPN.
You need to enable ip_fowarding in your rPi:
echo "1" > /proc/...
2
votes
Using Raspberry Pi as a Tunnelbear sharing device
I am not familiar with Tunnelbear, but I assume once you have set it up (should be easy if they have OpenVPN support, besides, you did not ask how to set up Tunnelbear, you asked how to share it. Add ...
Only top scored, non community-wiki answers of a minimum length are eligible
Related Tags
vpn × 215networking × 54
raspbian × 44
pi-3 × 22
iptables × 19
wifi × 14
ssh × 14
ethernet × 11
raspbian-stretch × 10
pi-hole × 10
pi-2 × 9
pi-4 × 9
dns × 9
raspbian-buster × 8
connection × 8
bridge × 8
wireguard × 8
access-point × 7
port-forwarding × 7
linux × 6
server × 6
hotspot × 6
systemd-networkd × 6
pi-3b+ × 5
internet × 5