The VPN server is the host which will receive connections from clients. You can have a VPN for different reasons, but usually with OpenWISP it is done mainly for 2 reasons:
- management VPN: used to reach devices that are deployed on different layer2 networks that are not reachable via public IPs, used for troubleshooting and maintenance purposes - traffic VPN: used to tunnel internet traffic to a server to hide traffic information from the ISP which the device is connected to internet from In both cases, the VPN server is hosted either on the same server where OpenWISP is running, or in the same data center (another VPS, another container, whatever) and the devices are just clients. These are the 2 most common scenarios. Does your goal with setting up the VPN fall within one of these? Or are you doing it for testing purposes? Federico On Wed, Mar 20, 2019 at 1:13 PM Karol Ołtarzewski <[email protected]> wrote: > I am changing configuration of a Device. > And I have next question namely my router is automatically registered and > it is registered as device not as VPN server however my goal is to make my > router working as VPN and router it-self (without additional server). > Should I configure my router as a device or VPN server? if device in remote > tab should I as a host give ip of my router? (if I understood properly from > docs I should give in remote tab as host ip of my vpn server which will be > my OpenWRT device if I am wrong please correct me) > > On Tue, 19 Mar 2019 at 20:44, Federico Capoano <[email protected]> > wrote: > >> Are you changing the configuration of a Device, Template or VPN Server? >> >> Since from your config it looks like you are dealing with a client VPN, I >> think it's either a Device or Template. >> In these cases, the openwisp-config deamon running on OpenWRT will handle >> it. >> >> There's no automatic sync for VPN servers yet, but once we solve this >> https://github.com/openwisp/django-netjsonconfig/pull/105 it will be >> possible to implement it. >> >> I hope this helps. >> Fed >> >> On Tue, Mar 19, 2019 at 12:40 PM Karol Ołtarzewski <[email protected]> >> wrote: >> >>> you are right my code is not up to date I will update my code as soon as >>> I will have some free time and I will let you know, however when I am just >>> saving I am not getting any error (getting only error when trying preview >>> my configuration). >>> >>> And do I need to make some changes in openwrt ui to make my >>> configuration works properly or openwisp will handle that? >>> >>> On Tue, 19 Mar 2019 at 16:07, Federico Capoano < >>> [email protected]> wrote: >>> >>>> Hey Karol, >>>> >>>> what happens if you save? Do you get a validation error? >>>> I had the same problem recently and it was because of the new "context" >>>> field, I sent a fix for it last month: >>>> https://github.com/openwisp/django-netjsonconfig/commit/59dbd8691b66ba7c947593b829583a57b7ba5313 >>>> Is your code up to date? >>>> >>>> Federico >>>> >>>> On Mon, Mar 18, 2019 at 4:03 PM Karol Ołtarzewski <[email protected]> >>>> wrote: >>>> >>>>> Do I need to make some changes in browser openwrt UI after making >>>>> OpenVPN configuration for my router in openwisp-controller? The >>>>> configuration seems to be applied and I am not able to preview my >>>>> configuration because I am getting >>>>> `django.core.exceptions.ValidationError: >>>>> ['Enter valid JSON']` in my console however I can download my >>>>> configuration >>>>> and see what is changed, my openVPN configuration after downloading it: >>>>> ``` >>>>> config openvpn 'VPN' >>>>> option auth 'SHA1' >>>>> option auth_retry 'none' >>>>> option ca '/etc/certs/ca.pem' >>>>> option cert '/etc/certs/mycert-crt.pem' >>>>> option cipher 'BF-CBC' >>>>> option comp_lzo 'adaptive' >>>>> option dev 'VPN' >>>>> option dev_type 'tun' >>>>> option enabled '1' >>>>> option fast_io '0' >>>>> option float '0' >>>>> option fragment '0' >>>>> option key '/etc/certs/mycert-key.pem' >>>>> option mode 'p2p' >>>>> option mssfix '1450' >>>>> option mtu_disc 'no' >>>>> option mtu_test '0' >>>>> option mute '0' >>>>> option mute_replay_warnings '0' >>>>> option nobind '1' >>>>> option persist_key '0' >>>>> option persist_tun '0' >>>>> option port '1194' >>>>> option proto 'udp' >>>>> option pull '1' >>>>> list remote '192.168.8.1 1194' >>>>> option remote_random '0' >>>>> option reneg_sec '3600' >>>>> option resolv_retry 'infinite' >>>>> option script_security '1' >>>>> option tls_client '1' >>>>> option tls_timeout '2' >>>>> option tun_ipv6 '0' >>>>> option up_delay '0' >>>>> option verb '1' >>>>> ``` >>>>> >>>>> -- >>>>> You received this message because you are subscribed to the Google >>>>> Groups "OpenWISP" group. >>>>> To unsubscribe from this group and stop receiving emails from it, send >>>>> an email to [email protected]. >>>>> For more options, visit https://groups.google.com/d/optout. >>>>> >>>> -- >>>> You received this message because you are subscribed to the Google >>>> Groups "OpenWISP" group. >>>> To unsubscribe from this group and stop receiving emails from it, send >>>> an email to [email protected]. >>>> For more options, visit https://groups.google.com/d/optout. >>>> >>> -- >>> You received this message because you are subscribed to the Google >>> Groups "OpenWISP" group. >>> To unsubscribe from this group and stop receiving emails from it, send >>> an email to [email protected]. >>> For more options, visit https://groups.google.com/d/optout. >>> >> -- >> You received this message because you are subscribed to the Google Groups >> "OpenWISP" group. >> To unsubscribe from this group and stop receiving emails from it, send an >> email to [email protected]. >> For more options, visit https://groups.google.com/d/optout. >> > -- > You received this message because you are subscribed to the Google Groups > "OpenWISP" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > For more options, visit https://groups.google.com/d/optout. > -- You received this message because you are subscribed to the Google Groups "OpenWISP" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
