NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.

Forum Discussion

AKLGUY's avatar
AKLGUY
Apprentice
Jun 20, 2018
Solved

using Orbi VPN server with User Name/Password

Is there a way with the RBK50 and the VPN to allow a user name and password?

I have a friend that is currently over seas and he wants to watch some VoD stuff but they only allow people from NZ to access and watch it.

I have set my so my Orbi is in Router mode behind my normal Fibre Router in a DMZ zone.

 

And set up DDNS.

 

I can do the VPN but I would want to have username password rather than just giving a security config.

Or once I set up the VPN I can regenerate the config security incase a device gets lost.

10 Replies

  • I'm looking for similar question to be answered.  I'm new to setting up vpn server, on my Orbi router.  I've followed all instructions for setting up my vpn server and gotten a config zip file.

    I'm on Ubuntu running openvpn client and have followed instructions for MacOS.

    But there's no mention of setting up user and password.  How does that work in this case?

    I want to give access to specific users with their own username/password.

    Thanks

    • CrimpOn's avatar
      CrimpOn
      Guru - Experienced User

      That is not the way OpenVPN works.  The OpenVPN server creates SSL certificates for the server and for clients.  When a client version of OpenVPN attempts to connect, the process verifies that both certificates are correct.

       

      OpenVPN gets a remote device ('client') connected to the local LAN.  Once connected, it can access anything on the LAN that it knows the credentials for.  If there is a media server, FTP server, etc. on the LAN:

      • The Firewall on those devices must accept connections from remote devices, and
      • The Client must supply the proper credentials to the software running on the device.

       

      The OpenVPN built into Netgear routers may not be the appropriate solution for your needs.

  • OK, so if I understand, once I setup a user with the ca, crt, etc files and use my no-ip domain when configured in their openvpn client it should connect and in effect act like

    they have taken their computer and plugged an ethernet cable into my router.... they are on my network.  But to access any computers they need to login to those systems.

    I know this is a crude way of describing but this is what I think you might be saying.  Thanks

     

    Do I have to setup my own openvpn server running on one of my hosts to get user/passwd setup?  

     

    Thanks CrimpOn.

    • StephenB's avatar
      StephenB
      Guru - Experienced User
      timbopoise wrote:

      Do I have to setup my own openvpn server running on one of my hosts to get user/passwd setup?  

      An openVPN server by itself won't do it.

       

      Normally you'd use Radius or Active Directory for user authentication.  That can be linked to your own OpenVPN server (but not the one built into your router).

      • https://openvpn.net/as-docs/radius.html
  • CrimpOn's avatar
    CrimpOn
    Guru - Experienced User

    My understanding is that OpenVPN does not have a concept of "users".

    another approach might be to forward a specific (unusual) port number to the desired internal resource.

    For example, if the internal resource is a Linux computer that users connect to using ssh, then you could forward some goofy external port (say 12949 to port 22 (ssh) on that computer.

    When an external client connects to <your DDNS name>:12949, the router will connect that port to port 22 on the target computer.