Reference Manual


 Privilege required openvpn - interact with the OpenVPN application


openvpn ['connection' | close | list | status | help]

Command openvpn 'connection' establishes the specified OpenVPN connection, where connection is either an OpenVPN connection file name or a short connection ID defined in file openvpn.txt.

Command openvpn close closes an open connection.

Command openvpn list prints the connections contained in file openvpn.txt.

Command openvpn status prints status information.

A TAP-WIN32 adapter must be available in order to use OpenVPN. NAT32 should be configured to use 2 Internet interfaces, with the main Internet adapter as the Main interface and the TAP-WIN32 adapter as the Auxiliary interface. If NAT32 is to open and close OpenVPN connections, it must be running in Admin mode.

If NAT32 is running in User Mode, connections will be established, but no routes will have been added to the Windows Routing Table, thus rendering the connection useless.

The first line of the openvpn.txt file must contain the full path of the OpenVPN executable file, typically:

C:\Program Files\OpenVPN\bin\openvpn.exe

Subsequent lines contain a short connection ID, followed by the name of the associated .ovpn file. The .ovpn files are connection-specific OpenVPN configuration files that your VPN Service Provider will have supplied.

Be sure to remove the auth-user-pass line in those files or OpenVPN will prompt for a Username and Password before connecting.

For authentication, create a file up.txt containing the needed Username in line 1 and Password in line 2.

The current directory must also contain the certificate file .crt issued by the VPN Service Provider. The file can be copied from the directory in which the Service Provider's software is installed.

Because certificates have an expiry date, BE SURE to update the certifcate file regularly.

Up to 16 connections can be specified in the openvpn.txt file, but note that comments are currently not allowed.

Before starting an OpenVPN connection, be sure that the NAT32 Interface selection algorithm is set to main. Any other value will render the connection inoperable.

An OpenVPN connection can be shared by all computers that are using NAT32 as their Internet gateway. This means that those computers continue to have unaltered local access, while all Internet access will be via the OpenVPN connection. This is particularly useful for streaming video content from geo-blocked Internet sites for playback on a local display device.

For convenience, this page can be used to interact with the OpenVPN application. The page has been designed for use on mobile devices and should be customized as needed.

Interface Selection, Control Panel, Routing by source address, RAS Dial-Up Networking