VPN Giving internal IP?

[darkloud]

Hey guys! Just followed the Hak5 Episode on making an OpenVPN server from scratch on Linux. I can connect to the VPN as long as I am connected to my own internal network... I thought the whole purpose was to be able to connect from the outside?

[Mr-Protocol]

In order to connect from the outside, you will need to forward the appropriate ports (like any other behind-NAT hosted service) to the correct internal IP address. Then you would use your external IP address to connect.

[machinica]

The reason you can connect internally is because your VPN is still only seeing the inside network. You may need to look at your actual router. You would need to do port forwarding and/or network address translation on the router so that the OpenVPN servers IP address is available to the outside. 

Keep in mind though, that when you do this, your exposing your internal network directly to the outside world without the protection of NAT or the firewall so make sure you read up and know what you are doing before moving forward.

Realistically and statistically, you will be fine. But there is always the chance.

[Bitbot17]

3 hours ago, machinica said:

Keep in mind though, that when you do this, your exposing your internal network directly to the outside world without the protection of NAT or the firewall so make sure you read up and know what you are doing before moving forward.

if i understand correctly by making a raspberry pi openvpn server i am opening up my "internal" home network to the world unless i use a firewall or NAT service?

[machinica]

Sorry for the delay! Potentially, if you were natting your public IP as opposed to using something like Dynamic DNS.