ไม่สามารถเล่นวิดีโอนี้
ขออภัยในความไม่สะดวก

How to Configure OpenVPN on TrueNas 12 - Setup your own Home VPN - Part 1

แชร์
ฝัง
  • เผยแพร่เมื่อ 19 มิ.ย. 2021
  • Configure and setup OpenVPN without a Jail on TrueNas 12 and allow remote access connections to the TrueNas Subnet or just to the TrueNas system itself safely and securely. Use this Virtual Private Network to securely connect back to your home network without worrying about hacker attacks on the connection!
    mytechworks.on...
    IF JAILS DISCONNECT AFTER ENTERING TUNABLES:
    From User: @PovGRide742 - Change tunable "natd_interface" to "vnetO" instead of the physical interface name
    OR
    Create a new jail with NAT selected in basic properties.
    power the jail on, then off, do not delete the jail.
    It creates a NAT network interface that the jails will use to get out of the TrueNAS server.
    Additional Parameters:
    push "route 192.168.0.0 255.255.255.0"
    push "redirect-gateway def1 bypass-dhcp"
    push "dhcp-option DNS 8.8.8.8"
    push "dhcp-option DNS 1.1.1.1"
    Tunables:
    firewall_enable
    firewall_type
    gateway_enable
    natd_enable
    natd_interface
    natd_flags
    -dynamic -m

ความคิดเห็น • 515

  • @ThefamousMrcroissant
    @ThefamousMrcroissant 2 ปีที่แล้ว +14

    This is by far the highest quality tutorial currently available on setting up an OpenVPN server for TrueNAS. Any bit of doubt I had about parameters I saw in other tutorials was taken away, in particular the IP parameter (which, from my current understanding, just creates another "mini subnet" within the local subnet under the specified prefix).

  • @sean2881
    @sean2881 3 ปีที่แล้ว +7

    How this only has 2400 views is beyond me. This is clear, concise, top quality. One of the best on TH-cam. Thank you!!

  • @TrueNAS
    @TrueNAS 3 ปีที่แล้ว +75

    Awesome clear and concise tutorial! Thank you for sharing this.

    • @TechworksOnline
      @TechworksOnline  3 ปีที่แล้ว +5

      Thanks, Appreciate it !

    • @alanhiggins2521
      @alanhiggins2521 3 ปีที่แล้ว

      Thank you for responding, i did apply the rules however i still have no traffic, only access to the truenas GUI. i am providing the rules i applied. There are duplicates in trying to get traffic to flow.
      ipfw list
      00100 allow ip from any to any via lo0
      00200 deny ip from any to 127.0.0.0/8
      00300 deny ip from 127.0.0.0/8 to any
      00400 deny ip from any to ::1
      00500 deny ip from ::1 to any
      00600 allow ipv6-icmp from :: to ff02::/16
      00700 allow ipv6-icmp from fe80::/10 to fe80::/10
      00800 allow ipv6-icmp from fe80::/10 to ff02::/16
      00900 allow ipv6-icmp from any to any icmp6types 1
      00997 allow ip from 172.16.1.0 to 192.168.2.9 445
      00997 allow ip from 172.16.1.0/24 to 192.168.2.9 445
      00998 allow ip from 172.16.1.0/24 to 192.168.2.0/24
      00998 allow ip from 172.16.1.0 to 192.168.2.0
      00998 allow ip from 172.16.1.0 to 192.168.2.1
      00998 allow ip from 172.16.1.0/24 to 192.168.2.0/24
      00998 allow ip from 172.16.1.0/24 to 192.168.2.0/24
      01000 allow ipv6-icmp from any to any icmp6types 2,135,136
      65535 allow ip from any to any

    • @user-hq6eu8js4e
      @user-hq6eu8js4e 2 ปีที่แล้ว +1

      Help! my clients have different certificates but get the same ip addresses (192.168.1.2) when connecting to openvpn. What to do?

    • @Novoworks
      @Novoworks 2 ปีที่แล้ว

      @@alanhiggins2521 - I had similar issue, but was due to using the wrong interface name

    • @TechworksOnline
      @TechworksOnline  2 ปีที่แล้ว

      @@user-hq6eu8js4e create a different client certificate with a different Common Name and different subject alternative name

  • @DrCrowtron
    @DrCrowtron 8 หลายเดือนก่อน +2

    After wading through forums, blogs, YT channels for days this was the first and only solution I have found to safely access my files remotely through a VPN. Thank you so very much Techworks!

  • @ArkSkyDragon
    @ArkSkyDragon หลายเดือนก่อน +1

    Seriously man thanks for this video, I got like 80% of this setup on my own but couldn't figure out why I was unable to connect to my locally host services.

  • @franksmith3492
    @franksmith3492 2 ปีที่แล้ว +3

    I don't know that I've ever felt compelled to comment on a TH-cam video before, but I had to on this one. I have spent hours and hours watching videos, looking through forums, and following tutorials to setup OpenVPN on my TrueNas. And I've never gotten it to work how I wanted it to. This video explained exactly what to do and was very detailed and helpful. The only thing I had to change was my natd_interface to em0 like some of the other comments said. Thanks so much for making this video.

  • @joee14216
    @joee14216 2 ปีที่แล้ว +20

    if anyones having any issues connecting to the other servers outside of truenas's ip make sure that the 'natd_interface' tunable matches your config. Mine was 're0' instead of 'le0' so I had to change the value inside of that to get it to work.

    • @Xworkofme
      @Xworkofme 2 ปีที่แล้ว

      Hi, where i can find this information on my Truenas Dashboard ?

    • @muhammadaamer7261
      @muhammadaamer7261 ปีที่แล้ว

      @@Xworkofme hey, don't know if you're still tryna figure this out but you can find it on the 'interfaces' tile on the dashboard above your network traffic speed indicator

  • @alexgcasals
    @alexgcasals 3 หลายเดือนก่อน +1

    Thank you ❤ I have been trying to do this for several days and couldn't until I found this tutorial. Thanks for explaining the reason for each parameter, this way I could easily change it to the values for my setup

  • @jayspek
    @jayspek ปีที่แล้ว +2

    This absoulutley saved my bacon. Could not for the life of me get this to work until I found this video. Much appreciated.

  • @danfan6587
    @danfan6587 ปีที่แล้ว

    Dude you have no idea how much time I spent on this, trying to make my nextcloud only accessible by VPN and it was IMPOSSIBLE. But then you appeared and saved the day, thank you so so much

  • @michelbernier2801
    @michelbernier2801 2 ปีที่แล้ว +4

    Take me a day and half to set this up, my first problem is I didn’t watch the complete video. My bad. Then second problem was the Additional Parameters I took the quotation marks as asterisks and def1 as defl. It was hard to see these in video but found the correct parameters in the text. Once I fixed my errors it worked like a charm. So watch the whole video till the end before setting this up and you should have no problems. This one is complete as other videos leaves stuff out. Made notes and added these “Lessons Learned File” for future reference.

  • @johnwilkerson1511
    @johnwilkerson1511 2 ปีที่แล้ว +2

    Took me a few tries, but your tutorial made it possible to connect from the internet. Thanks!

  • @techtourist7r
    @techtourist7r 2 ปีที่แล้ว

    You absolutely ripped other VPN tutorials to shreds, this fit my scenario and worked really well, my hero for 2022!

  • @PovGRide742
    @PovGRide742 ปีที่แล้ว +2

    Thank you so much for this! This got OpenVPN working on my machine with the ability to access my files remotely without fail.
    That being said, I, like some other users on here and on your website, experienced issues with jails (Plex in my case), not working properly. Oddly, it took a day for it to break (all was working fine when I first set it up). The ONLY way I could access my Plex remotely was when connected to the VPN. Originally I could connect to Plex without connecting to the VPN. Again... it took about a day for this to break.
    I did see your description comment about adding a jail with NAT selected. This fixed it! However, I read on a thread on Reddit of someone having an issue as well, and they were able to fix it instead by changing out their network interface identifier in the natd_interface tunable for vnetO. I disabled the added jail and tried this, and everything is still working properly. Now it's been less than a day, so I'll update here if it breaks again, but I figured I'd bring to your attention. Reddit post from TheRealStiffCookie below.
    "I had an extremely similar issue, in that I couldn't have OpenVPN and Plex set up on my Truenas at the same time.
    First step I tried was deleting the natd_interface tunable (mentioned on another site), which fixed Plex, but of course broke OpenVPN.
    I then re-added the tunable, but instead of setting the value to my physical interface (em0 - which I followed from a guide), I set it to vnet0 instead. All of my plugins, and OpenVPN have been working alongside each other since!
    Hope that helps anyone else that may stumble across this issue."

    • @rubenhernandezgarcia303
      @rubenhernandezgarcia303 9 หลายเดือนก่อน +1

      This has been working for me at the moment. I am not 100 percent sure what this does to the networking layout of the config, but hopefully its a stable solution. Thanks.

    • @TechworksOnline
      @TechworksOnline  9 หลายเดือนก่อน

      Amazing thanks for the great find !! I will add this to the description!

    • @thatnerdgui3496
      @thatnerdgui3496 หลายเดือนก่อน

      I changed mine to vnet0 and although I can access my network drives and truenas I can't access the plug-ins. I guess I have some digging to do.

  • @NirajKapasi
    @NirajKapasi ปีที่แล้ว +1

    Amazing step-by-step video for the entire process. Did not falter anywhere. I would never have been able to do this on my own just by reading the manuals and adjusting the settings. Thanks for posting this.

  • @gregorcutt1199
    @gregorcutt1199 2 ปีที่แล้ว +1

    After fighting for weeks, I found this video. Thank you for using your covid time so helpfully!!!

  • @jacekhajnrych6937
    @jacekhajnrych6937 2 ปีที่แล้ว +2

    This is the best OpenVPN tutorial for TrueNAS I've found. Thank you!

    • @TechworksOnline
      @TechworksOnline  2 ปีที่แล้ว

      Thanks for the comment ! Appreciate it.

  • @XxxGuitarMadnessxxX
    @XxxGuitarMadnessxxX 2 ปีที่แล้ว +2

    As an absolute novice to this kind of stuff, thank you for providing a very clear and concise walk-through of adding a vpn service here. I was struggling trying to figure out why the config file wasn't enough for trueNas charts and it seems I totally skipped the whole certificate step 😅

  • @miked5487
    @miked5487 2 ปีที่แล้ว +1

    Huge thanks dude. I finaly got it working. I tried so many other tutorials and they confused me. Yours was straight forward and Thorough!

  • @VicTimes
    @VicTimes 2 ปีที่แล้ว +2

    This video helped me resolved the issue I had struggled for a week. Thanks!

  • @nils1953
    @nils1953 2 ปีที่แล้ว +1

    Thank you! Just watched a different tutorial before and while it did work, this worked in every aspect!
    Plus, your video was much easier to follow, better explained and a lot nicer to listen to.

  • @ryanbattersby2259
    @ryanbattersby2259 2 ปีที่แล้ว +1

    mate this tutorial has been an absolute god send, very detailed and precise EVERY step of the way, and bous points for having the additional params in the bottom becuase I couldn't tell if it was a 1,l or i. this has made the whole experince of being able to get access to my NAS to edit my photos on the go abosoltely painless. you get a 15/10 rating from me.

    • @TechworksOnline
      @TechworksOnline  2 ปีที่แล้ว +2

      Awesome! Glad it helped you.

    • @ryanbattersby2259
      @ryanbattersby2259 2 ปีที่แล้ว

      @@TechworksOnline I followed like 3 other tutorials and nothing worked after following them, then after watching yours it worked first go 👌 brilliant work you earnt a sub haha

  • @jbrasmartins
    @jbrasmartins ปีที่แล้ว +2

    Clear and understable! Thank you very much! By far one of the best tutorials!

    • @Aesir5
      @Aesir5 ปีที่แล้ว

      It's a great tutorial

  • @dedebenui
    @dedebenui ปีที่แล้ว +1

    Thank you so much!!! the bit from 16:00 was missing from other tutorials. Great stuff!

  • @desertlightning7335
    @desertlightning7335 2 ปีที่แล้ว +2

    Thank you so much! Worked the first time from this tutorial, I never got it to work before,

  • @InversionesAlfadan
    @InversionesAlfadan 3 ปีที่แล้ว +3

    Es el video mas detallado y completo que he visto para configurar la VPN en treuenas. Gracias por el aporte

    • @TechworksOnline
      @TechworksOnline  3 ปีที่แล้ว +1

      Gracias! tu comentario significa mucho

  • @THEACERASPIREMAN
    @THEACERASPIREMAN ปีที่แล้ว

    Thanks so much man, I always struggle with networking stuff since I rarely do it. This was very clear and concise.

  • @Mysticpete
    @Mysticpete 2 ปีที่แล้ว +4

    Very good tutorial, very concise, thank you for all your efforts, much appreciated.

    • @cango5679
      @cango5679 2 ปีที่แล้ว +1

      agree fully.

  • @AdamcNz
    @AdamcNz 3 ปีที่แล้ว +2

    wow thanks so much. this was the best one around that made the process a hell of a lot easier to understand and get working.

  • @ethanpawelski
    @ethanpawelski 2 ปีที่แล้ว

    Amazing, clear step-by-step process! I wish I had watched this before attempting it on my own.

  • @formulafanaticDB
    @formulafanaticDB ปีที่แล้ว

    People like you are what make this world great!

  • @damienretro4416
    @damienretro4416 11 หลายเดือนก่อน +2

    Awesome tutorial. Very clear and concise. Unfortunately I can only access the Truenas server. SMB etc works but I can't access and other network devices including jails. I set the NAT tunable to bridge0 which is the name of my Truenas NIC but no dice.

  • @bindestrek
    @bindestrek 2 ปีที่แล้ว +2

    i've done everything you did, and can connect to my samba share, but nothing else... no internet through the server or internet outside of the server... no connections to other jails on the server or other computers on the network. any idea what i might have done wrong?

  • @firefox8810
    @firefox8810 ปีที่แล้ว

    Awesome clear and concise tutorial ! Thank you so much for sharing this. I can now access all my files (even from my iphone) when travelling ;)
    Just a point, when configuring System/Tunables/natd_interface, of course enter your interface (not necessary le0, you should have shown that we must check in Network/interfaces for the right name) ;)

  • @ttownnife
    @ttownnife 3 ปีที่แล้ว +3

    Any advice on why when I try to put anything in the additional parameters under openVPN under Services it crashes when I go to save?

    • @TechworksOnline
      @TechworksOnline  3 ปีที่แล้ว

      You can manually add the options to the openvpn.conf file
      in a Shell on Truenas Navigate to /usr/local/etc/openvpn/server/openvpn_server.conf
      Add the options as is to the bottom of the file.
      Save, and restart the openvpn service in truenas

  • @julkkis666
    @julkkis666 ปีที่แล้ว

    this is a really good tutorial. my usecase would be to have a work-arround for a ISP level port-forwarding block, so i can forward a specific service to possible clients without giving full access to my entire local network with a VPN (which works even with the ISP block). :^) gonna try this when i get the time to try it! thanks for the video!

  • @randomnoobpt
    @randomnoobpt 3 ปีที่แล้ว +10

    Thanks for the detailed tutorial!
    Though after having the OpenVPN server and the firewall rules applied as shown in the video I'm having issues with the jails (plugin installation fails when getting "pkg" (No address record error) and I can't even ping 1.1.1.1 with success). Is there a workaround for this? Or it ends up being a tradeoff for setting up OpenVPN this way?
    Also what's the difference and advantages/disadvantages of setting up the OpenVPN server from TrueNAS natively or inside a Jail?

    • @michelfreund
      @michelfreund ปีที่แล้ว +2

      Hi, same issue here. @Techworks, any clue?

    • @bartatgier2453
      @bartatgier2453 ปีที่แล้ว +2

      Same issue!

  • @123miekkonen
    @123miekkonen 2 ปีที่แล้ว +2

    Great tutorial, thanks! VPN works nicely, but alas, a virtual machine runnin on Truenas completely lost network. So removed the tunables and VM's network works again. Something about those tunables seems to screw the VM - host bridge big time

    • @TechworksOnline
      @TechworksOnline  2 ปีที่แล้ว

      I think if you just reapply the network with the tunables in place it will start to work again

    • @123miekkonen
      @123miekkonen 2 ปีที่แล้ว

      @@TechworksOnline hmm not sure how to do that, AFAIK Truenas handles the VM network automatically. I did try re-creating the VM's NIC but that didn't help

    • @123miekkonen
      @123miekkonen 2 ปีที่แล้ว

      Well can't get this to work. DHCP inside the VM doesn't work and when I set the VM to use static IP, I can connect to the VM from other machines BUT the VM cannot communicate with any other IP that the host. I'll have to set up another VM to run the OpenVPN because this just doesn't work

  • @Al-mo6tw
    @Al-mo6tw 2 ปีที่แล้ว +4

    Hi, this was nearly perfect, the vpn setup certainly works. However something to do with the tuneables breaks network acess to any virtual machines I have installed on the freenas box. They wont assign dhcp, i can acess them via ssh when setting a manual ip in the vm's however they do not get internet access. Just wont ping google, it will however ping local lan machines So i think something is blocking them/ firewall related I imagine. It seems similar to some issues others are having on here with jails breaking. As soon as I remove the tuneables, dhcp is back and the vm's have full internet acess. it would be great if you could help / advise on this, thanks

    • @PhotosByJJA
      @PhotosByJJA 2 ปีที่แล้ว +1

      Same issue with the tunables. Solution I found was adding second NIC and setting one to auto DHCP, then use that for plex and other plugins. The other using a static IP and setting the natd_interface to it for VPN. Depending on setup you might need a switch to add the second cable to your router. Not sure if there is a setting to get around this but this was an easy/quick solution.

  • @XSwyx
    @XSwyx 2 ปีที่แล้ว

    Works on Scale, without adding the tunables ! Fantastic THANK YOU !

  • @PeterCulka
    @PeterCulka ปีที่แล้ว +1

    I don't understand why this cannot be written in TrueNAS documentation. I was struggling with RootCA, as I always wanted to use the NAS root CA (cause ... why the hell not?) And I didn't understand why it wasn't working...

  • @rknoepfli87
    @rknoepfli87 2 ปีที่แล้ว

    Thanks for the tutorial! I'm surprised there are not more likes on this video.

  • @TheGabobonilla
    @TheGabobonilla ปีที่แล้ว +1

    This is excellent, but I have a problem, mi internet provider put me in a NAT and I Don have a public IP, is there a solution for my issue?

  • @onetouch3244
    @onetouch3244 2 ปีที่แล้ว +1

    i did all the same, but when it comes to downloading the avpn config file i get an error. I can't download the config file. Here's an error:
    1) Client certificate must have keyusage xtension 2) client certificate must have extebdedkeyusage extension set. 3) Client certificate must have "digital signature" and/or "key agreement" set for keyusafe extension. 4) Client certificate must have "tls web client authentication" set in extendedkeyusage extension. although I checked more than once everything is in place.
    Guys can anyone help me to solve this problem?

  • @Baum_0000
    @Baum_0000 ปีที่แล้ว +1

    Its the best Video i have Sean for this toppig👍👍👍👍

  • @buddhasworkshop3894
    @buddhasworkshop3894 2 ปีที่แล้ว +2

    Many thanks for this very very good tutorial, it worked almost on the spot. Almost, because my knowledge in this subject is "almost" not perfect... :-) (but getting better). You might have gone perhaps in 2-3 places slightly deeper in the explanation, so that an even larger audience would be able to follow. I mean by that explaining a little bit more for example what the different IP addresses mean that are being used throughout the installation (subnet etc.). Or why we can only use the config file to securely access our server in the end, without using the certificate as such, given that there is the option to download it. (I hope I understood correctly, that it is already included in the config file and not that all my secret cute-cat-videos are not open to the internet... :-) ). Of course I know, that it is also our responsibility to dig deeper, if something is not understood! It would have just kept the otherwise perfect flow of information.
    Oh, and your voice is just perfect for tutorials!!!

  • @erosion01
    @erosion01 ปีที่แล้ว +1

    Is there a way to preserve my home connection while accessing the remote server through the VPN? Because when using the VPN my internet access becomes only what is at the end of the tunnel.

  • @_barzak_3799
    @_barzak_3799 2 ปีที่แล้ว +2

    I followed this step by step and got the connection established perfectly. Only problem is as soon as i apply the changes to the tunables, my pi hole wich i run in an VM on the TrueNas stopps working. The vm has a static IP. After tunables changes i cannot use it as a nameserver and the VM itself cannot resolve anymore. any help is welcome, im really stuck at this :/

    • @jordanthompson
      @jordanthompson 2 ปีที่แล้ว

      I am having the same problem. I did find that if I disable "firewall_enable" -> "yes", I am able to access my truenas's gui, but my IP address doesn't change when I connect

  • @jackscan4358
    @jackscan4358 2 ปีที่แล้ว +3

    Thanks for the very clear tutorial. However there is one major issue with the tunables in this setup: The option 'natd_interface' breaks the DNS access of the jails. That's why there are plenty of people having issues with their jails after configuring the openvpn service. Should the interface be set to the physical network connection or should we use a virtual interface in this tunable? It's not really clear and if you select the physical interface, the openvpn service runs but the jails lose the DNS access.

    • @Catalyph
      @Catalyph 2 ปีที่แล้ว

      You will want to use the interface your TrueNAS is connected to physically. In the TrueNAS dashboard.

    • @jackscan4358
      @jackscan4358 2 ปีที่แล้ว +2

      @@Catalyph that is what's being used in my case, but as said this causes and issue with the name resolution in the jails (see numerous posts with jail issues)

    • @Catalyph
      @Catalyph 2 ปีที่แล้ว

      @@jackscan4358 I set my Jails up after setting up the VPN, and they work fine, I wonder if deploying a new jail after the setting the tunables will work ?

    • @sergiogustavo13
      @sergiogustavo13 2 ปีที่แล้ว +2

      Same issue, with vpn working i loss jail access, is like the ports are not redirected

    • @sergiogustavo13
      @sergiogustavo13 2 ปีที่แล้ว +1

      I finally managed to resolve it if anyone want the solution:
      Go to jail > Edit > and activate the following options:
      - DHCP Autoconfigure IPv4
      - VNET
      - Berkeley Packet Filter
      Check configurations:
      - Venet_default_interface = auto
      - IPv4 Interface = empty
      - Ipv4 Address = assigned automatically when you chose DHCP Autoconfigure Ipv4. This will be your Nextcloud management IP
      - Ipv4 Default router = it will have your last IPv4 default router ip, but it will not be used...
      - IPv6 = all options disabled
      Now go to your router and assign to the DHCP the Ipv4 IP address in order to be sure that it will not change on nextcloud restarts.
      Finally, if you go to the IP address it will probably show that you need to add it to the Nextcloud trusted_domains.
      From TrueNas shell or SSH to TrueNas perform the following actions:
      vi /usr/local/www/nextcloud/config/config.php
      go to the line:
      'trusted_domains' =>
      array (
      0 => 'localhost',
      1 => 'old nextcloud ip',
      Update the 1 => with the new ip address, or add a new line 2 => with the new ip address

  • @nerdkidleo
    @nerdkidleo 2 ปีที่แล้ว +1

    Hi enabling natd is preventing me from getting dhcp for my plugins, anyway around that?

  • @gaso636
    @gaso636 2 ปีที่แล้ว +1

    Bravo majstore puno si pomogai i sve radi bezprijekorno.....

    • @TechworksOnline
      @TechworksOnline  2 ปีที่แล้ว

      Odlično, drago mi je da vam je pomoglo.

  • @FrankZambaras
    @FrankZambaras 2 ปีที่แล้ว +1

    Thank you for this excellent tutorial. Great work here.

  • @crashbash2020
    @crashbash2020 2 หลายเดือนก่อน

    tutorial worked well, though this seems to have stopped my openvpn CLIENT in a jail from working. removing the NAT tuneables makes it work again, but obviously that breaks the server. anyone have any ideas?

  • @VeryTutos
    @VeryTutos 3 ปีที่แล้ว +1

    Best Tutorial about this!!

  • @user-hq6eu8js4e
    @user-hq6eu8js4e 2 ปีที่แล้ว +1

    Help! my clients have different certificates but get the same ip addresses (192.168.1.2) when connecting to openvpn. What to do?

  • @BHuck67
    @BHuck67 11 หลายเดือนก่อน

    Thank you so much for this great tutorial, really well done. However, I've spent a lot of time trying to get it to work without success. Well, it works, but either NAS subnet IPs are reachable and jails lost access to the Internet, either jails have access but no way to reach other LAN IPs. I give up.
    Note: the workaround with creating a jail to generate a NAT interface did not work.

  • @JoonCrafting
    @JoonCrafting ปีที่แล้ว

    Hi, I have error next error: SSL Routines: certificate verify failed, what to do?

  • @123dillerfar
    @123dillerfar 3 ปีที่แล้ว +1

    Thanks a lot for this tutorial
    I will try this with my own true as later this week

  • @larryroyovitz7829
    @larryroyovitz7829 ปีที่แล้ว

    I have a VPN at home, and my TrueNAS is remote. I want TrueNAS to connect as a client to my already existing VPN here. Is this possible? Every video and tutorial seem to want the truenas side to have the VPN.

  • @JimoJimParedes
    @JimoJimParedes หลายเดือนก่อน

    Can I use OpenVPN client on my phone and access the TrueNAS?

  • @davidmair2679
    @davidmair2679 ปีที่แล้ว

    Many thanks for the video, this worked perfectly once I worked out a network peculiarity out with our wireless network provider. I found there IP address not my address inside there network.

  • @user-xd9vu8ww6k
    @user-xd9vu8ww6k 2 ปีที่แล้ว

    The best tutorial for customize OpenVPN on TrueNAS - thanx! But I have no understanding how to set up tunable parameters on TrueNAS SCALE. Could you update tutorial with SCALE settings?

    • @TechworksOnline
      @TechworksOnline  2 ปีที่แล้ว

      Try with no tunables.

    • @marioumazul
      @marioumazul 2 ปีที่แล้ว

      @@TechworksOnline I tried without tunables (could not find them on Truenas Scale) but it can't access my network devices by their ip adress. I can only connect to my truenas scale ip address. Would love some help as well. Anyway, thanks for the great tutorial! EDIT: I found on Truenas forum that in Truenas Scale on System Settings - Advanced there is a Sysctl setting that should be equivalente to tunables on core, but we can only enter 'Variable' and ''Value' fields and not 'type', I'm afraid to mess with this since there's a waring before I enter something.

  • @socialdance1323
    @socialdance1323 ปีที่แล้ว

    sir what is the "common name" in certificate and other fields, is this random?

  • @petmic202
    @petmic202 3 ปีที่แล้ว +1

    very very goOOod tuto, now i untherstand more what to do, and what i do

  • @murgh7682
    @murgh7682 3 ปีที่แล้ว +3

    Could you make a little video about how to revoke a client certificate? Simply deleting it won't stop the user from being able to connect to the vpn service.
    BTW it's important to use an uncommon ip range for the local network, so avoid 192.168.0 and 192.168.1 since this could give routing issues when a user is tyring to log in from home or internet cafe if that location also uses this common ip range.

    • @TechworksOnline
      @TechworksOnline  3 ปีที่แล้ว +2

      Thanks for the info! I will create a video of how to revoke a cert, as it is not very straight forward and will need some command line stuff as well!

    • @murgh7682
      @murgh7682 3 ปีที่แล้ว

      @@TechworksOnline Thanks in advance! Looking forward to it.

  • @Lolman6543
    @Lolman6543 2 ปีที่แล้ว

    i got a new Internet Provider wich only gave me an ipv6 hosting, so i am limited to ipv6. is there any way to connect via vpn using ipv6 ?

  • @canadatransistor
    @canadatransistor 2 ปีที่แล้ว

    Thanks man, you helped me fix 90% of my issues. Super awesome! ++ subscribed

  • @mariohrkac2238
    @mariohrkac2238 3 ปีที่แล้ว +1

    Thank you very much for this amazing tutorial. So clear and understandably

    • @TechworksOnline
      @TechworksOnline  3 ปีที่แล้ว +1

      Awesome, Glad I could help!, Part 2 will be coming this Sunday!

    • @mariohrkac2238
      @mariohrkac2238 3 ปีที่แล้ว +1

      @@TechworksOnline you mean part 2 😁💪🏽

    • @TechworksOnline
      @TechworksOnline  3 ปีที่แล้ว

      @@mariohrkac2238 Yes, Fixed!

  • @jag5cof
    @jag5cof 2 ปีที่แล้ว

    on Truenas Scale, what is the Tunable's equivalent? What I found in the system/advance/ is systcl. Any help is apprecicated

  • @TomK
    @TomK 2 ปีที่แล้ว

    wow, big kudos!!
    the only thing i had to change was the network interface. it is igc0 for me (tunable natd_interface)
    worked out of the box! thank you so much!!! i never ever could make this on my own.

  • @jsamusicsociety
    @jsamusicsociety ปีที่แล้ว

    Could you tell me where can I find this tunable on Truenas Scale please?

  • @TortoiseBlog
    @TortoiseBlog 3 ปีที่แล้ว +1

    Worked perfectly. Thank you very much.

  • @justinrussell3495
    @justinrussell3495 ปีที่แล้ว

    I think it was done on purpose, but what is the public IP address shown in the OpenVPN connect software. I’ve been struggling to get this to work and while I am in a unique double NAT scenario (so port forward on both router and router/modem combo) I am wondering if this setup will work if you are connect from an IP outside of the 192.168.x.x range. I was able to connect to my trueNAS remotely using openVPN configured on my router, but I want to figure out how to use the trueNAS service. To clarify, I no longer am running the openVPN configuration on my router, so that is not the problem. Furthermore, does having uPNP enabled or disabled have any bearing on if this setup will work?

  • @richardbennett4365
    @richardbennett4365 8 หลายเดือนก่อน

    The only problem I am having now is that the server is assigning the same IP address on the intermediate network behind a NAT translation to all clients that connect. So, the server takes 10.8.0.1 on this network, and provisions 10.8.0.2 for the first client joining. However, if a second client joins, with its own client certificate, still the server assigns 10.8.0.2 for the second and subsequent client connections.

    • @TechworksOnline
      @TechworksOnline  7 หลายเดือนก่อน

      New certs with different common name and subject alt names should assign diff ips

  • @50charactersonly61
    @50charactersonly61 ปีที่แล้ว

    Do I need to do the steps in Part 2? My goal was to access my TrueNAS outside of my local network and this worked like a charm!

  • @brandonmcfadden6841
    @brandonmcfadden6841 ปีที่แล้ว

    I don't seem to have internet access through my TrueNAS server, regardless of whether the redirect gateway parameter is set or not. I can access the NAS itself, but not the internet and no other devices on the local network that TrueNAS is on. Any advice?

    • @TechworksOnline
      @TechworksOnline  ปีที่แล้ว

      There is a part 2 ro this video that should help

  • @Venomous28
    @Venomous28 2 ปีที่แล้ว

    I followed the steps/ My OpenVPN on the client side connects, but drops the connection every minute or so (it reconnects automatically., I get a CONNECTED notification every time). I can't ping my NAS from the client, internet access is very shakey down the VPN too, also no access to my SMB share.

  • @rafalcebula
    @rafalcebula 2 ปีที่แล้ว +3

    I really liked your tutorial. It's really detailed. So followed it, I also have DDNS setup on google domains from my NAS. I opened the port for the OpenVPN, but still can't connect from a remote computer :/ any ideas?

    • @TechworksOnline
      @TechworksOnline  2 ปีที่แล้ว +3

      Make sure you are using the correct ethernet port you see on the dashboard of the TrueNAS, mine was le0, yours may be different.

    • @adambockhorst2340
      @adambockhorst2340 2 ปีที่แล้ว

      @@TechworksOnline I am having the same issue. I followed everything up to where we connected. It keeps timing out. Any suggestions? How do you check if you are using the correct ethernet port? On my dashboard, mine is saying re0.

    • @TechworksOnline
      @TechworksOnline  2 ปีที่แล้ว

      Then you should reference re0 in all of the settings that I used le0 in the video.
      You can test your routers port forwarding by also forwarding port 22 temporarily and just try to ssh to your public IP address . If you get in. Then you know your port forwarding is correct. Make sure to disable it afterwards

  • @freeman2399
    @freeman2399 26 วันที่ผ่านมา

    So I need a DDNS or public domain to access my NAS outside of my home network? There's no other way to access it directly?

    • @TechworksOnline
      @TechworksOnline  26 วันที่ผ่านมา +1

      You can use your IP address. But that might change at any time. Ddns will prevent you from not knowing the IP because it keep the IP updated to the ddns url every 30 minutes or so.

  • @hanjiahua2665
    @hanjiahua2665 ปีที่แล้ว

    i can't have more than 1 user connecting to the vpn, is there any solution to this? please help.

  • @janekw.6022
    @janekw.6022 ปีที่แล้ว

    I am trying to set it up on Truenas Scale right now.
    But I do not know where or how to set up the tunables.
    I am able to connect to the OpenVPN but I am not getting any axess to the network itself.
    Any ideas?

  • @ezip916
    @ezip916 ปีที่แล้ว +1

    Great video. I was able to get the VPN working to the server only. Got any thoughts on how to get access to other local resources and the internet? I am sure it is an easy fix but I been searching around and trying things for a while now.

  • @henrycabezas4049
    @henrycabezas4049 4 หลายเดือนก่อน +1

    Eres el mejor!!! Gracias

  • @SkyRex23
    @SkyRex23 2 ปีที่แล้ว +2

    Thank you so much for the tuorial !
    At 16:30 is it : push "redirect-gateway def1 bypass-dhcp" or push "redirect-gateway defl bypass-dhcp" with lowercase "L" ?

    • @TechworksOnline
      @TechworksOnline  2 ปีที่แล้ว +3

      One 1

    • @PrivatePaul
      @PrivatePaul 2 ปีที่แล้ว +1

      @@TechworksOnline might wanna have said that.... i had to google it too. that's THE single point where it's very likely people will misread, and it's the one point where you don't say what you're typing :/

    • @TechworksOnline
      @TechworksOnline  2 ปีที่แล้ว +2

      @@PrivatePaul I will enter the details into the Description of the video.

  • @marcorusso81
    @marcorusso81 2 ปีที่แล้ว

    Hi all, strange things occur to me... i ve done all the steps, OpevnVPN works, access the remote subnet either and i can upload and download file from the tunnel; BUT when i try to download anthing from the shares locally from a PC in the same subnet of the truenas, its simply hang! instead i can upload anything at high speed over LAN and VPN network, any hints? it seems disabling the Tunable variable of the firewall fix the local smb browsing and file sharing, but then it break the access of the remote subnet from the VPN Tunnel.. ( i can access only the Truenas )

  • @InversionesAlfadan
    @InversionesAlfadan 3 ปีที่แล้ว +1

    Hello. In the common name should I put my public ip address? (in my case it is static) or should I associate the ip to a service like dyndns or noIP?

    • @Catalyph
      @Catalyph 3 ปีที่แล้ว +1

      You can put what ever you want. BUT wait for tomorrow's video ! It has something for you !

    • @InversionesAlfadan
      @InversionesAlfadan 3 ปีที่แล้ว

      @@Catalyph Thanks

  • @BogdanAlexeTV
    @BogdanAlexeTV 2 ปีที่แล้ว

    thanks man, keep the tutorials coming. They are super useful

  • @SuspiciousCrow
    @SuspiciousCrow ปีที่แล้ว

    Awesome guide works like a charm. Thank you

  • @valmicio
    @valmicio 4 หลายเดือนก่อน +1

    Quero agradecer pelo excelente material. E também pela resposta rápida a uma duvida técnica minha. O detalhe que ele sempre atribuía o mesmo ip para qualquer conexão.

    • @TechworksOnline
      @TechworksOnline  4 หลายเดือนก่อน

      Create another client certificate with a new different common name and subject alternative name for each new client and they should get different IP

    • @valmicio
      @valmicio 4 หลายเดือนก่อน

      Muito obrigado. Funcionando perfeitamente

  • @kaushmaisuria
    @kaushmaisuria 5 หลายเดือนก่อน

    Thanks, great video.

  • @jimmy8653
    @jimmy8653 2 ปีที่แล้ว +1

    Can you accesses the gui as well remotely ?

    • @Catalyph
      @Catalyph 2 ปีที่แล้ว

      There is more on that in part 2.
      you should be able to.
      th-cam.com/video/it0HdDiutIE/w-d-xo.html

  • @OrganGrinderEleven
    @OrganGrinderEleven ปีที่แล้ว +1

    This is a great tutorial, saved me much hair pulling. Now, not to be greedy, but do you have any idea how to add 2FA to the mix? I have some users who can't help themselves and keep getting spyware on their personal computers, so I don't feel at all comfortable about govong ANY of them access to the file server without 2FA of some sort.
    Any advice you (or anyone else reading this) could give would be greatly appreciated.

  • @whittzorro
    @whittzorro 2 ปีที่แล้ว

    i'm new into this and i may have missed way to many steps before setting up the OpenVPN server.
    is there any steps we should cover before setting up the server?
    i've followed the tutorial but i can't even connect in the first try.
    i've checked the comments to see similar problems and none of them solved the issue

  • @lolo90627
    @lolo90627 2 ปีที่แล้ว

    Many Thanks. Great tutorial and excellent work !

  • @bobzou7790
    @bobzou7790 ปีที่แล้ว

    Hi there,
    I'm just following the tutorial to setup OpenVPN on my Truenas13 box, I found once I add the additional parameters as instructed, my OpenVPN server wont start any more. I checked everything but could not figure out why, once removed the Additional parameters, the server starts fine. Anybody could help please?
    Regards,
    Bob

    • @TechworksOnline
      @TechworksOnline  ปีที่แล้ว

      Syntax issue usually if it wo t start.. try copy paste from description or website link

  • @DariuszMakowski
    @DariuszMakowski 2 ปีที่แล้ว

    If you have more than 1 nics, say 2 nics 1 for internet, 1 for lan only... in tunables, do you make 2 entries 1 for each nic? I want to pass vpn access to my private non-internet network.

  • @emrecandemir7108
    @emrecandemir7108 2 ปีที่แล้ว

    Can we configure multi user with usename and password authenticaton?

  • @Ashwekar
    @Ashwekar 2 ปีที่แล้ว +1

    Followed everything till 14:33, just like I did with Spacerex's tutorial. Still not able to connect. The connection gets timed out. No logs either. What am I doing wrong?

    • @TechworksOnline
      @TechworksOnline  2 ปีที่แล้ว +1

      Did you get port forwarding on your home router completed? That is usually the first thing I would check

    • @Ashwekar
      @Ashwekar 2 ปีที่แล้ว

      @@TechworksOnline yes I did

    • @pratikashwekar7783
      @pratikashwekar7783 2 ปีที่แล้ว +1

      @@TechworksOnline ​ I figured out what the issue was. I was actually trying to check if there are any updates available for truenas. But that was failing. Then I checked the network settings. For some reason gateway and nameservers were empty. I added those two things and now I can connect with openvpn. Feel like a huge load lifted from my head.

  •  9 หลายเดือนก่อน

    I used parameter for VPN Server Service like you but after save i can't start service. How can i fix it, please?

    • @TechworksOnline
      @TechworksOnline  9 หลายเดือนก่อน

      If it is not starting then it is likely syntax error.

  • @cosmy1975
    @cosmy1975 2 ปีที่แล้ว

    When i import my openvpn profile on the desktop client it says dns resolution error. Any tips?