Re: Importing OpenVPN. ovpn file in Fedora 25

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On 20/02/2017 18:34, Ed Greshko wrote:
On 02/20/17 12:53, Stephen Morris wrote:
     I'm using the Slickvpn provider for my vpn, which also uses
Openvpn. Under windows they provide a client which make connecting to
any of their servers, and changing between servers, and auto switching
between servers, child's play.
     They don't provide a client for linux but instead their web site
provides a link to instructions on how to set up Openvpn under Linux,
but it is aimed directly at Ubuntu. In order to get the vpn to work I
had to download a crt file that was configured for their server in
Singapore (as being the closest location to me), but there was no
keyfile. When I downloaded the .crt file I stored that file in my
downloads directory, and then in the vpn definition in networkmanager
I pointed the 'CA Certificates' option to the .crt file in my
downloaded location. Given you comments above, is that not how I
should be setting things up?
I looked at the Slickvpn site....

 From what I could tell, all you should need do is download the openVPN
file for each site you want to connect with from this page
https://www.slickvpn.com/locations/.  Then change the name of the file
from *.bin to *.ovpn and use the Import function of NetworkManager.
When prompted to save the certificates you should say yes.

After the connection is imported you would then go to the connection and
choose "Edit".  There you'd add your UN/PW and say OK.  After that you
should be able to connect.  Looking at the openVPN config file it is
using simple UN/PW authentication.   I don't see any requirements for
additional keys.

The Connection Type is show as Password.  This is different than my VPN
provider which has a Connection Type of Password with Certificates (TLS)
and the openVPN config supplied by them includes a CA, and User certs
plus a private key and tls_auth key.
Thanks Ed. After sending the email I went to that site and their site has changed. I downloaded the .ovpn files their links were pointing at for Singapore and Miami and imported them into Networkmanager which set everything up, including pointing the CA Certificates entry at an external location URL to get the certificate, which is a different location for each server and is pointing at a .pem file. I found via this method that their Australian servers still don't work and neither does their Indian Server, and their Hong Kong server wants a pin in order to connect. From their windows client they have servers that are Core Servers and one's that are not, and it seems to be difficult to connect to their servers which are not Core Servers. When using their Windows Client and pointing it at a definition that is a group of servers, its auto selection seems to only select Core Servers and fails if the list doesn't include a Core Server. Unfortunately their location site doesn't indicate which are Core Servers and which aren't, unless the links they provide are only for Core Servers, as I noticed from their map that Miami has two servers but they only provide a link to download the .ovpn file for one of them.


     As a side issue to this, which may be the provider I am using,
when I use the vpn my network performance goes through the floor. I
have spoken to the provider about it and they suggested I try a couple
of server in the US, but their performance is worse. I get the same
issue under both Linux and Windows. The provider recommends that I not
use their servers in Australia because network costs are so expensive.
Do you notice similar performance issues with your setup, and if not,
how do I identify whether it is a provider issue or my setup?
What I would do is go to a site such as http://www.speedtest.net and in
the settings menu pick a destination server at the same location as your
VPN end point.  Then I would run the speed test with and without being
connected to the VPN.  I would run each test multiple times and take an
average.  I did this with one of my endpoints in Seattle.  With the VPN
it was slower but only by about 5%.

It is not clear that their servers support it...but you can also try
turning LZO compression on in the "Advanced" settings for the
connection.  I see a slight increase in my speed tests with this turned
on.  YMMV depending on the type of data being transferred.
I've turned on LZO compression to see what happens. I'm on cable and I've found that speedtest.net tends to be a bit hit or miss as to whether it connects or not, plus my ISP recommends to not use it for cable speed tests. I tried a site called ozbroadband.com which test speed rating by downloading an image file of a user selected size, and if I'm not connecting via the vpn I am able to download a larger file than if I am connecting via vpn. I'm on a 100Mbps link and when I speed tested yesterday without the vpn I tested at a line speed of 80.52 Mbps, with the Singapore vpn connection it drops to 35.9 Mbps and with the Miami vpn connection it drops to 4.5 Mbps. I've tried a number of different speed test sites, including speedtest.net before I upgraded to cable, and let them select the server closest to the vpn server and I got a similar performance drop when using the vpn across all of them.

regards,
Steve



_______________________________________________
users mailing list -- users@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to users-leave@xxxxxxxxxxxxxxxxxxxxxxx



[Index of Archives]     [Older Fedora Users]     [Fedora Announce]     [Fedora Package Announce]     [EPEL Announce]     [EPEL Devel]     [Fedora Magazine]     [Fedora Summer Coding]     [Fedora Laptop]     [Fedora Cloud]     [Fedora Advisory Board]     [Fedora Education]     [Fedora Security]     [Fedora Scitech]     [Fedora Robotics]     [Fedora Infrastructure]     [Fedora Websites]     [Anaconda Devel]     [Fedora Devel Java]     [Fedora Desktop]     [Fedora Fonts]     [Fedora Marketing]     [Fedora Management Tools]     [Fedora Mentors]     [Fedora Package Review]     [Fedora R Devel]     [Fedora PHP Devel]     [Kickstart]     [Fedora Music]     [Fedora Packaging]     [Fedora SELinux]     [Fedora Legal]     [Fedora Kernel]     [Fedora OCaml]     [Coolkey]     [Virtualization Tools]     [ET Management Tools]     [Yum Users]     [Yosemite News]     [Gnome Users]     [KDE Users]     [Fedora Art]     [Fedora Docs]     [Fedora Sparc]     [Libvirt Users]     [Fedora ARM]

  Powered by Linux