On 05/29/2017 11:59 AM, [email protected] wrote:
I followed the procedure of setting 2 vpn proxyvm, one is openvpn and another 
one is pptp. Both of them are working fine in Ubuntu 16.04 and Windows 10. 
However, on Qubes OS 3.2, I have encountered the following problem.


1) openvpn is working, but failed to connect to VPN automatically when "VM uplink 
eth0" is connected.

I did checked the "Automatically connect to VPN when using this connection" on 
the GUI configuration tool and confirmed I saved the it many times.

I rebooted the vm and even reboot the Qubes OS, but vpn didn't come up automatically, and 
"Automatically connect to VPN when using this connection" on the gui was 
uncheced by itself.


2) For pptp vpn, it just failed to connect. As said the configuration is 
working in Ubuntu and Windows.

Is there anyone can help? And thank you for you help in advance.


If you're using Network Manager to run the VPN connections, be advised that the auto-connect to VPN setting doesn't always work as intended. When I used it a couple years ago it was buggy.

Also, a proxyVM can't directly tell when the physical network connection changes state (connected/disconnected) because 'eth0' in this case is just a virtual interface to sys-net. You could solve this by using NM in sys-net, but that removes a layer of Qubes security for your VPN link.

Most people seem to opt for the second set of VPN instructions using openvpn with scripts. Its more secure and openvpn will try to connect whenever the proxyVM has access. A slightly fancier version that can be controlled as a systemd service is here: https://github.com/tasket/Qubes-vpn-support

--

Chris Laprise, [email protected]
https://twitter.com/ttaskett
PGP: BEE2 20C5 356E 764A 73EB  4AB3 1DC4 D106 F07F 1886

--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To post to this group, send email to [email protected].
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/039fc724-455d-5245-1478-e7e80961d061%40openmailbox.org.
For more options, visit https://groups.google.com/d/optout.

Reply via email to