openvpn + raspberry pi question

[hiac]

I have a RT-AC68U router (flash with Merlin), I enabled openvpn server on router, and my devices include iphone, android, windows laptop, and raspberry pi.
it works in iphone, but there is some difficult on raspberry pi ( I follow instruction from http://kernelreloaded.com/openvpn-client-on-raspberry-pi/), it doesn't show error.

while troubleshooting, I notice two sections in router's openvpn configuration sections:

1) openvpn servers (2 of them, I only enabled 1).
I could create up to 32 Username and Password, and I only created 3 users.
Q1: if I have 3 devices, I need to create 3 accounts, or one account can be shared by multiple devices?

Q2: I only enable 1 server because I remember I saw a post here that there is no need to enable 2 servers. I wonder what's the reason.

2) openvpn cilents (5 of them)
for each client instance, I need to specify username and password
I didn't enable any of them
Q3: even though I didn't enable openvpn client in router, openvpn in iphone works fine. it make me wonder what's the purpose of this "openvpn client" setting in the router?

Q4: Can you help me how to configure openvpn client in raspberry pi?
here is what I tried:
when I ran "sudo /etc/init.d/openvpn start", I got:
[ ok ] Starting openvpn (via systemctl): openvpn.service.

when I view log using "tail /var/log/daemon.log", I got
systemd[1]: Started OpenVPN service.

when I ran "ifconfig tun0" in rpi, I got "tun0: error fetching interface information: Device not found'.

I go back to router, openvpn log, it doesn't show ip address of raspberry pi. When I test my iphone (which is working), I can see iphone's ip address in the log, and see the send/recv package size.

Many thanks!

btw, I asked some questions here previously: https://www.snbforums.com/threads/r...es-in-out-and-other-issues.37626/#post-311888

 

[HeMaN]

Q1: both are possible, one account for each device is best in terms of security
Q2: one server can serve many client devices, if you want another vpn network for separation or other type of connection (site to site) you can activate an extra VPN server
Q3: VPN client tabs on router has nothing to do with the clients connecting to the VPN server(s) on the router. This tabs are used when you connect your router as a client to a remote VPN server.
Q4: open vpn on the pi seems not to be installed correctly for tun0. I do not know how to configure the pi, best ask on pi forum or open VPN forum. Better chance of getting an answer there.

Verstuurd vanaf mijn A0001 met Tapatalk

 

[hiac]

Hello @HeMaN

Thank you very much for your answer. it clear of my confusion greatly.

Thank you again