OpenVPN - when's a new config file needed?

[martinr]

i made a couple of changes to the OpenVPN server settings (RT-AC68U) eg Direct clients to redirect Internet traffic, and I didn't bother to generate a new config file for the OpenVPN client on my iPhone. There was no problem, which didn't surprise me because I figured out that that sort of setting controls what the router does, not what the client does. But there'll be other settings where I wouldn't be so sure; usernames and passwords obviously would require a new config file.

Other than play safe and generate a new config file every time, which is silly, is there a rule of thumb to say which OpenVPN server settings require a new client config file and which don't?

Thanks

Martin

 

[RMerlin]

i made a couple of changes to the OpenVPN server settings (RT-AC68U) eg Direct clients to redirect Internet traffic, and I didn't bother to generate a new config file for the OpenVPN client on my iPhone. There was no problem, which didn't surprise me because I figured out that that sort of setting controls what the router does, not what the client does. But there'll be other settings where I wouldn't be so sure; usernames and passwords obviously would require a new config file.

Other than play safe and generate a new config file every time, which is silly, is there a rule of thumb to say which OpenVPN server settings require a new client config file and which don't?

Thanks

Martin

There's no simple rule, no. Some settings are server-specific, others are client-specific. There's too many settings to just quickly point at them and mention which is what, sorry.

 

[AdvHomeServer]

i made a couple of changes to the OpenVPN server settings (RT-AC68U) eg Direct clients to redirect Internet traffic, and I didn't bother to generate a new config file for the OpenVPN client on my iPhone. There was no problem, which didn't surprise me because I figured out that that sort of setting controls what the router does, not what the client does. But there'll be other settings where I wouldn't be so sure; usernames and passwords obviously would require a new config file.

Other than play safe and generate a new config file every time, which is silly, is there a rule of thumb to say which OpenVPN server settings require a new client config file and which don't?

Thanks

Martin

RMerlin is correct in saying that it's impossible to accurately give an answer to such a general question. He know more about OpenVPN than I do,

Having said that, I just wrote a three part series on OpenVPN and DD-WRT. One thing I discovered is that the client file is pretty resilient. I made some big changes on the server and no changes were needed on the client. I also changed the redirect gateway but found out than DNS also needed to be considered to work properly. (I used 8.8.8.8, Google) Also, the firewall needed specific statements to work properly. I'm not an iptables expert ... I just researched a lot and used trial and error.

 

[martinr]

RMerlin is correct in saying that it's impossible to accurately give an answer to such a general question.

That's fine. At least no-one came back and said "Stupid boy: it's blindingly obvious."

Having said that, I just wrote a three part series on OpenVPN and DD-WRT.

Could I have a link to it, please?

Many thanks, and to RMerlin, too.

Martin

 

[AdvHomeServer]

That's fine. At least no-one came back and said "Stupid boy: it's blindingly obvious."



Could I have a link to it, please?

Many thanks, and to RMerlin, too.

Martin

http://advancedhomeserver.com/dd-wrt-and-openvpn-part-1/

Thanks for asking.

 

[martinr]

http://advancedhomeserver.com/dd-wrt-and-openvpn-part-1/

Thanks for asking.

No, THANK YOU! What a gold mine your website is, and a very attractively crafted one, too. It's a delight to look at: lovely photos, clear text and screenshots, and no distractions. And, most importantly, easy to read and digest. There's so much in that Table of Contents that I want to go through, I feel like a child who's just been given the freedom of the sweet shop. Having just come from DD-WRT and now with a grounding in OpenVPN on Merlin's firmware, I know I shall derive a great deal from your three-part series.

I really appreciate the link.

Many thanks

Martin

 

[AdvHomeServer]

No, THANK YOU! What a gold mine your website is, and a very attractively crafted one, too. It's a delight to look at: lovely photos, clear text and screenshots, and no distractions. And, most importantly, easy to read and digest. There's so much in that Table of Contents that I want to go through, I feel like a child who's just been given the freedom of the sweet shop. Having just come from DD-WRT and now with a grounding in OpenVPN on Merlin's firmware, I know I shall derive a great deal from your three-part series.

I really appreciate the link.

Many thanks

Martin

Thanks. Your reply was my goal for everyone who reads it. As time passes and I think of more things to add, I will write about them.