> > Does your goal with setting up the VPN fall within one of these? > > I think that second one option is proper for me (the traffic VPN) I just want to made my router working like a VPN server and client in the same time and I feel like the best option for it will be configuring my router as client VPN (I mean adding for device template with OpenVPN configuration).
Can you correct if I am wrong? Thanks in advance On Thu, 21 Mar 2019 at 17:03, Federico Capoano <[email protected]> wrote: > The VPN server is the host which will receive connections from clients. > > You can have a VPN for different reasons, but usually with OpenWISP it is > done mainly for 2 reasons: > > - management VPN: used to reach devices that are deployed on different > layer2 networks that are not reachable via public IPs, used for > troubleshooting and maintenance purposes > - traffic VPN: used to tunnel internet traffic to a server to hide traffic > information from the ISP which the device is connected to internet from > > In both cases, the VPN server is hosted either on the same server where > OpenWISP is running, or in the same data center (another VPS, another > container, whatever) and the devices are just clients. > > These are the 2 most common scenarios. > > Does your goal with setting up the VPN fall within one of these? Or are > you doing it for testing purposes? > > Federico > > On Wed, Mar 20, 2019 at 1:13 PM Karol Ołtarzewski <[email protected]> > wrote: > >> I am changing configuration of a Device. >> And I have next question namely my router is automatically registered and >> it is registered as device not as VPN server however my goal is to make my >> router working as VPN and router it-self (without additional server). >> Should I configure my router as a device or VPN server? if device in remote >> tab should I as a host give ip of my router? (if I understood properly from >> docs I should give in remote tab as host ip of my vpn server which will be >> my OpenWRT device if I am wrong please correct me) >> >> On Tue, 19 Mar 2019 at 20:44, Federico Capoano < >> [email protected]> wrote: >> >>> Are you changing the configuration of a Device, Template or VPN Server? >>> >>> Since from your config it looks like you are dealing with a client VPN, >>> I think it's either a Device or Template. >>> In these cases, the openwisp-config deamon running on OpenWRT will >>> handle it. >>> >>> There's no automatic sync for VPN servers yet, but once we solve this >>> https://github.com/openwisp/django-netjsonconfig/pull/105 it will be >>> possible to implement it. >>> >>> I hope this helps. >>> Fed >>> >>> On Tue, Mar 19, 2019 at 12:40 PM Karol Ołtarzewski <[email protected]> >>> wrote: >>> >>>> you are right my code is not up to date I will update my code as soon >>>> as I will have some free time and I will let you know, however when I am >>>> just saving I am not getting any error (getting only error when trying >>>> preview my configuration). >>>> >>>> And do I need to make some changes in openwrt ui to make my >>>> configuration works properly or openwisp will handle that? >>>> >>>> On Tue, 19 Mar 2019 at 16:07, Federico Capoano < >>>> [email protected]> wrote: >>>> >>>>> Hey Karol, >>>>> >>>>> what happens if you save? Do you get a validation error? >>>>> I had the same problem recently and it was because of the new >>>>> "context" field, I sent a fix for it last month: >>>>> https://github.com/openwisp/django-netjsonconfig/commit/59dbd8691b66ba7c947593b829583a57b7ba5313 >>>>> Is your code up to date? >>>>> >>>>> Federico >>>>> >>>>> On Mon, Mar 18, 2019 at 4:03 PM Karol Ołtarzewski <[email protected]> >>>>> wrote: >>>>> >>>>>> Do I need to make some changes in browser openwrt UI after making >>>>>> OpenVPN configuration for my router in openwisp-controller? The >>>>>> configuration seems to be applied and I am not able to preview my >>>>>> configuration because I am getting >>>>>> `django.core.exceptions.ValidationError: >>>>>> ['Enter valid JSON']` in my console however I can download my >>>>>> configuration >>>>>> and see what is changed, my openVPN configuration after downloading it: >>>>>> ``` >>>>>> config openvpn 'VPN' >>>>>> option auth 'SHA1' >>>>>> option auth_retry 'none' >>>>>> option ca '/etc/certs/ca.pem' >>>>>> option cert '/etc/certs/mycert-crt.pem' >>>>>> option cipher 'BF-CBC' >>>>>> option comp_lzo 'adaptive' >>>>>> option dev 'VPN' >>>>>> option dev_type 'tun' >>>>>> option enabled '1' >>>>>> option fast_io '0' >>>>>> option float '0' >>>>>> option fragment '0' >>>>>> option key '/etc/certs/mycert-key.pem' >>>>>> option mode 'p2p' >>>>>> option mssfix '1450' >>>>>> option mtu_disc 'no' >>>>>> option mtu_test '0' >>>>>> option mute '0' >>>>>> option mute_replay_warnings '0' >>>>>> option nobind '1' >>>>>> option persist_key '0' >>>>>> option persist_tun '0' >>>>>> option port '1194' >>>>>> option proto 'udp' >>>>>> option pull '1' >>>>>> list remote '192.168.8.1 1194' >>>>>> option remote_random '0' >>>>>> option reneg_sec '3600' >>>>>> option resolv_retry 'infinite' >>>>>> option script_security '1' >>>>>> option tls_client '1' >>>>>> option tls_timeout '2' >>>>>> option tun_ipv6 '0' >>>>>> option up_delay '0' >>>>>> option verb '1' >>>>>> ``` >>>>>> >>>>>> -- >>>>>> You received this message because you are subscribed to the Google >>>>>> Groups "OpenWISP" group. >>>>>> To unsubscribe from this group and stop receiving emails from it, >>>>>> send an email to [email protected]. >>>>>> For more options, visit https://groups.google.com/d/optout. >>>>>> >>>>> -- >>>>> You received this message because you are subscribed to the Google >>>>> Groups "OpenWISP" group. >>>>> To unsubscribe from this group and stop receiving emails from it, send >>>>> an email to [email protected]. >>>>> For more options, visit https://groups.google.com/d/optout. >>>>> >>>> -- >>>> You received this message because you are subscribed to the Google >>>> Groups "OpenWISP" group. >>>> To unsubscribe from this group and stop receiving emails from it, send >>>> an email to [email protected]. >>>> For more options, visit https://groups.google.com/d/optout. >>>> >>> -- >>> You received this message because you are subscribed to the Google >>> Groups "OpenWISP" group. >>> To unsubscribe from this group and stop receiving emails from it, send >>> an email to [email protected]. >>> For more options, visit https://groups.google.com/d/optout. >>> >> -- >> You received this message because you are subscribed to the Google Groups >> "OpenWISP" group. >> To unsubscribe from this group and stop receiving emails from it, send an >> email to [email protected]. >> For more options, visit https://groups.google.com/d/optout. >> > -- > You received this message because you are subscribed to the Google Groups > "OpenWISP" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > For more options, visit https://groups.google.com/d/optout. > -- You received this message because you are subscribed to the Google Groups "OpenWISP" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
