Hot answers tagged

8 votes

Does Raspberry Pi 4 processor support AES-NI instructions?

The Raspberry Pi 4 does not have cryptographic extensions, to be more precise it has, but to be enabled would require HW changes alongside paying a license to Broadcom/ARM. Here's the link for a ...
user avatar
7 votes

How to bridge an access point with a remote network by Wireguard? (with the use of systemd-networkd)

You like to replace the OpenVPN server from my example (1) with Wireguard as shown on the schema in the question. You also want to have a bridged virtual private network to have both remote private ...
user avatar
  • 39.6k
6 votes
Accepted

Cannot connect to PiVPN Server from WAN but can connect through LAN

Info: To have a simple openvpn server installation for reference look at Simple openVPN with static keys. The first idea seeing the picture was that you confused WAN- and LAN-address. But lets look ...
user avatar
  • 39.6k
6 votes
Accepted

Raspberry Pi as OpenVPN Access Point

I don't know something about AWS VPC. But because it seems to be only a routing problem I will use openVPN for reference. For routing it should not be make a big difference. I will try to be as ...
user avatar
  • 39.6k
6 votes

Wireguard "Unknown device type" "Protocol not supported"

According to a comment on r/Wireguard, this error is caused by having the wrong kernel headers: dkms packages (wireguard-dkms this time) need kernel headers for current kernel you have loaded (uname -...
user avatar
  • 278
5 votes

Unable to apt-get update but connected to internet?

You could also try and ping 8.8.8.8 to see if you are actually able to get packets out to the internet. If you are then check your DNS settings as per cat /etc/resolv.conf You would expect to see ...
user avatar
5 votes
Accepted

OpenVPN speed and security

The speed could be limited in multiple ways by including one/some bottleneck(s): WiFi itself being limited The Pi's internet connection is slow, or... limited via interface bandwidth.. or the Pi ...
user avatar
  • 2,473
5 votes
Accepted

Wireguard installation

I do not follow the link you have given, tl;dr. But it seems that it uses the method to download WireGuard from the Raspbian testing version Bullseye and install it on the current Raspbian stable ...
user avatar
  • 39.6k
4 votes
Accepted

OpenVPN as a background process

There is a debian-way of running OpenVPN, which is a lot easier than trying with different scripts on your own. When you install openvpn using the package manager (apt), like: sudo apt-get install ...
user avatar
  • 1,841
4 votes
Accepted

Raspberry Pi 3 How to connect to work VPN

You need a VPN client running on the Raspberry Pi to be able to connect to your work VPN. One of the most common clients is the Cisco AnyConnect client. There is a version for Linux that seems to ...
user avatar
  • 1,008
4 votes
Accepted

OpenVPN on Raspberry Pi stopped working (no tun0)

Not all information about OpenVPN is logged to /var/log/syslog. You can view this information if you run the process manually. First, stop the OpenVPN service: sudo systemctl stop openvpn Then, try ...
user avatar
4 votes
Accepted

Clients cannot connect to pivpn server anymore

Well I found the solution for me - hopefully it helps you too! Found that /var/log/openvpn.log on the RPi had the line "VERIFY ERROR: depth=0, error=CRL has expired" Searching that gave several ...
user avatar
  • 156
4 votes

How to convert a Layer 3 VPN to a Layer 2 VPN?

First some general information to get an idea what to do. As you already have found there are in general two ways to configure a Virtual Private Network: a bridged setup on OSI Layer 2 and a routed ...
user avatar
  • 39.6k
4 votes
Accepted

Does Raspbian keep a security log file, and what is its location?

The Raspberry Pi OS uses systemd, so you will find logs in its journal. It also contains the logging from the OpenVPN server. Look at it to the current boot with: rpi ~$ journalctl --boot=0 --pager-...
user avatar
  • 39.6k
3 votes
Accepted

VPN + IP Route headaches

Change the vpn configs to both have dev tun and change your iptables to use: *mangle :PREROUTING ACCEPT :INPUT ACCEPT :FORWARD ACCEPT :OUTPUT ACCEPT :POSTROUTING ACCEPT COMMIT *raw :PREROUTING ACCEPT ...
user avatar
3 votes
Accepted

OpenVPN won't start on boot (OSMC)

It looks like changing all the ".ovpn" files instead to use ".conf" extension worked. Not sure why that is. E.g.: sudo openvpn --config /etc/openvpn/Netherlands.conf
user avatar
  • 209
3 votes

What is the simplest way to securely access my Raspi from internet?

Using ssh to securely access your Raspbery Pi ssh is a client that interacts with ssh servers. OpenSSH is used on many Linux distributions to act as the server. Installing openssh-server Really, ...
user avatar
  • 1,374
3 votes

Using 'Network Manager' for Wireless & VPN Management

I'm also fairly new to using the RP. I ran into the same problem using a wired network connection. I edited my /etc/network/interfaces file and removed the line "iface eth0 inet dhcp" and rebooted, ...
user avatar
  • 31
3 votes
Accepted

Route wifi AP traffic(wlan0) to tun0 (openvpn) and keep eth0 unaffected for LAN SSH

Brdging an access point together with a wired ethernet interface is possible but connect to a local network with internet access together with using a vpn tunnel is a routing problem. So you can only ...
user avatar
  • 39.6k
3 votes

Is Forticlient VPN available for Raspbian OS?

I use openfortivpn too. install with: apt install openfortivpn start with: sudo openfortivpn [forticlienthost] --username=[user]
user avatar
3 votes
Accepted

How to bridge an access point with a remote network by openvpn?

Example for this setup: bridge ┌──────────┐ bridge ┌───────┐ vpn-tunnel │ │...
user avatar
  • 39.6k
3 votes
Accepted

Connecting Raspberry Pi to 2 separate networks

First of all: very good explained question. But it is a sophisticated setup. And just to answer your question: yes, it is needed to setup special static routes on several devices. But it is very ...
user avatar
  • 39.6k
3 votes
Accepted

SSH into Raspberry Pi connected to OpenVPN

The problem is with the routing. You try to connect from remote to the PI, but the return packets are routed through the VPN. The port forwarding might work, you have to find out where it goes wrong. ...
user avatar
  • 2,160
3 votes
Accepted

Setting up Bridged VPN using: RPi 3G Hotspot router + openvpn client to connect to home RPi OpenVPN server

Having a remote OpenVPN server at your home and connect to it with the RasPi is a good solution if you cannot use port forwarding on the modem. Here is an example setup for what you have described: ...
user avatar
  • 39.6k
3 votes
Accepted

Is there a way to keep a VPN connection permanent after shutting down?

We don't know anything about your log in commands but you can put this commands into a shell script. This is basic bash programming and you will find millions of tutorials how to do it. If you have ...
user avatar
  • 39.6k
3 votes

Preventing DNS Leaks on Raspberry Pi VPN Router

Try this sudo nano /etc/dnsmasq.conf My internet is connected via eth0 then theres a vpn connection turned on interface eth0 static ip_address=192.168.1.80/24 # Static ip for your rpi static ...
user avatar
3 votes

Wireguard installation

@Ingo has the correct answer - it seems better than other solutions around the Internet at the moment advising to add the Debian-unstable repository. I encountered a few issues while running through ...
user avatar
3 votes

Wireguard "Unknown device type" "Protocol not supported"

I haven't followed the tutorial you used but wireguard is heavy under development and there are some outdated installation tutorials on the web. Try this Wireguard installation that uses an official ...
user avatar
  • 39.6k
2 votes
Accepted

Using Raspberry Pi as a Tunnelbear sharing device

You just need to turn your Raspberry Pi into a router, then the traffic to Internet will be routed by your Raspberry Pi via the VPN. You need to enable ip_fowarding in your rPi: echo "1" > /proc/...
user avatar
  • 189
2 votes

Using Raspberry Pi as a Tunnelbear sharing device

I am not familiar with Tunnelbear, but I assume once you have set it up (should be easy if they have OpenVPN support, besides, you did not ask how to set up Tunnelbear, you asked how to share it. Add ...
user avatar

Only top scored, non community-wiki answers of a minimum length are eligible