OpenVPN multiple connections

Recently OpenVPN released an important update 2.3.11. This allows established multiple VPN connection at the same time!

OpenVPN download

I tested and used it everyday in the Windows 7 64bit. Now I am switching to Macbook Pro, because the company allows me to do so.

1. Installation:

Download and install the OpenVPN 2.3.11 from the link above.

We are going to do multiple TAP adapters, which are virtual network kernel devices. Each VPN connection will have its own TAP adapter.

2.Start the Cmd with elevated privileges

In the command prompt change the directory to cd C:\ProgramFiles\TAP-Windows
Than run following bat file addtap.bat, which is located in the same directory.

As the output you should see:

C:\ProgramFiles\TAP-Windows\bin>”C:\Program Files\TAP-Windows\bin\tapinstall.exe” install
“C:\Program Files\TAP-Windows\driver\OemVista.inf” tap0901

Device node created.
Install is complete when drivers are installed…

Updating drivers for
tap0901 from C:\Program Files\TAP-Windows\driver\OemVista.inf.

Drivers installed
successfully.

C:\Program
Files\TAP-Windows\bin>pause

Press any key to
continue . . .

Simply repeat this step with adding new TAP for each additional VPN connection. All newly created TAP adapters are shown in the Control Panel\Network and Internet\Network Connections.

The name stands for VPN connection, after renaming the TAP.

3.Configuration

The recommended step is to create and configure all necessary files in the work directory and than copy them into the OpenVPN configuration directory.

C:\Users\djanulik\Documents\AMP\QA\amp-eu>dir /b

ca.crt
djanulik.conf
djanulik.crt
djanulik.key

First the OpenVPN configuration file needs to be renamed to OpenVPN standard ovpn file extension.

rename djanulik.conf djanulik.ovpn


It might be as a great advantage to set up PSpad (text editor www.pspad.com,written by Czech developer) to call it from command line.

Control Panel\System and Security\System\Advanced system settings

In the lower window,please select PATH And simply add the path to the installed PSpad.

C:\Program Files(x86)\PSPad editor;

After changing the environment variables, you have to reboot the computer

Finally you can edit the configuration file directly from windows command line:

pspad djanulik.ovpn

Here is the configuration sample

client

dev tun

proto udp

remote control-vpn.immunet.com
33434

resolv-retry infinite

nobind

persist-key

persist-tun

ca caamp-control.crt

cert djanulikamp-control.crt

key djanulikamp-control.key

comp-lzo

verb 3

max-routes 1000

dev-node amp-control

The last step is to update your *.ovpn configuration files. In my case there are five VPN connections:

amp-control

amp_engine

amp-eu

amp-production

amp-qa

Please note that each “ovpn” configuration file needs to have variables set to match with the particular VPN connection as well as TAP virtual adapter. dev-node TAPVPN3

You should have following files in the C:\Program Files\OpenVPN\config for the first VPN called amp-control:

caamp-control.crt

djanulikamp-control.crt

djanulikamp-control.key

djanulikamp-control.ovpn

You can read apart from the configuration file djanulikamp-control.ovpn, we differentiate keys for amp-control

ca caamp-control.crt

cert djanulikamp-control.crt

key djanulikamp-control.key

and the TAP adapter

dev-node amp-control

The dev-node parameter needs variable “amp-control”, which has been recently added to TAP under Control Panel\Network and Internet\Network Connections.

After adding another VPN configuration file to the C:\Program Files\OpenVPN\config as well as the keys, you should be able to see new connection option for VPN, in the status bar.

Clicking on “connect” option establishes new VPN connection simultaneously running with one another. The Network connections show the second TAP as running (without the red cross).