Nethserver as VPN Client to avoid geoblocking limitations

Hi,

How to configure OpenVPN to be client of another VPN?

I would like to configure my NethServer instance to use a service like HideMyAss to intend to assit TV with a French/US IP to bypass geoblocking limitations…

Simply configure the server from VPN page under the “Client” tab :wink:

1 Like

Thanks a lot, I will try next monday.

Except that the NS setup created from that page is too simplistic for some VPNs, or at least the one I use.

I ended up creating my own .conf file in the /etc/openvpn directory, and the NS service starts/stops that alongside the RoadWarrier service I also run without any further configuration necessary.

Cheers.

That’s on purpose, but we are adding options to the openvpn page.
Have you got a list of useful options we could add?

I’m not sure how many of these are defaults, but this is the conf file provided by my VPN provider:

dev tun
fast-io
persist-key
persist-tun
nobind
remote xxx.xxx.net 1194
remote-random
pull
comp-lzo
tls-client
tls-remote server
ns-cert-type server
verb 3
key-direction 1
route-method exe
route-delay 2
tun-mtu 1500
fragment 1300
mssfix 1450
<cert>
-----BEGIN CERTIFICATE-----
<snip> <snip> <snip>
-----END CERTIFICATE-----
</cert>
<key>
-----BEGIN RSA PRIVATE KEY-----
<snip> <snip> <snip>
-----END RSA PRIVATE KEY-----
</key>
<tls-auth>
#
# 2048 bit OpenVPN static key
#
-----BEGIN OpenVPN Static key V1-----
<snip> <snip> <snip>
-----END OpenVPN Static key V1-----
</tls-auth>
<ca>
-----BEGIN CERTIFICATE-----
<snip> <snip> <snip>
-----END CERTIFICATE-----
</ca>

Then I add the following:

log-append  /var/log/openvpn/UK-VPN.log
status /var/log/openvpn/status-UK-VPN.log

verb 3

route-nopull

script-security 2
up /etc/openvpn/tunup.sh
down /etc/openvpn/tundown.sh

txqueuelen 250

Cheers.

Interesting. I understand that your using NethServer as a vpn client, right?
I think that our best option for a setup like yours is to let the user enter an openvpn config file directly, under the Advanced section.
Note: I think that route-method is relevant only on Windows.