Hello All, I would like to customize the VPN Base subnet and mask. Is it possible in openVPN? If so, could you please advise how to do that? Also how to verify the devices are connected using vpn?

I would like to verify from OpenBalena Server. I can see the device is registered. But unable to SSH to RasPi using Ethernet IP address and dont know the VPN client IP address of RasPI. root@Balena-CLI:~# balena device a4577b3 == COOL SHAPE ID: 1 DEVICE TYPE: raspberrypi3 …

Gotcha, in that case the best way is probably to grep /var/run/openvpn/server-*.status for the device UUID (in the VPN container).

Thank you. I am able to see the VPN status and IP address. However not able to SSH to RasPI. Is it possible from VPN container? or is there any other way? sorry to ask lot :frowning: . also is ther any default credential configured in Balena OS? Virtual Address,Common Name,Real Address,Last Ref …

@dganesh81 SSH on BalenaOS is bound to port 22222, to pass -p 22222 to your SSH command and see if that works.

[image] richbayliss: 22222 It is a good hint… But still getting denied by Pubkey. root@Balena-CLI:~# ssh -p 22222 172.29.163.200 The authenticity of host ‘[172.29.163.200]:22222 ([172.29.163.200]:22222)’ can’t be established. RSA key fingerprint is SHA256:Dm4eu0XAc1EMq8hq1Tbq7vGkuiN+cTqPj…

@dganesh81 are you using a production image, rather than a development one? If you’re using a production image then you must use a public/private key for auth and it should be provided in your device’ config.json. See here for details.

[image] richbayliss: g a production image, r I am using production image. which one is better? I am currently checking whether Balena is suitable for our project. If i use production image, do i need to generate RSA key in each RasPI manually? or can i use Balena CLI to generate it? please …

@dganesh81 the images are the same in the main part, it’s just that services are more restricted (for security) on a production image. I suggest that you want to put your machine’s public key in the config.json of all your fleet you want access to, rather than a different one per-device. I haven’t …

@dganesh81 as of v8.15.0 of open-balena-vpn you can use VPN_BASE_SUBNET and VPN_INSTANCE_SUBNET_BITMASK to dictate the IP addresses handed out to VPN clients. I’ve also switched the default subnet over to the CGN address space (100.64.0.0/10) so the defaults should work in the majority of cases now. …

OpenBalena OpenVPN Service

openBalena

dganesh81 June 25, 2019, 7:49am 27

@ [richbayliss]. Understood. Thank you for the details.

Unable to connect to devices

Topic		Replies	Views
Open issues/Queries with OpenBalena openBalena	15	1569	July 25, 2019
Devices offline & VPN Error: Cannot load DH parameters from dh.pem openBalena docker , network	18	2208	August 26, 2019
Heartbeat Only "The terminal is unavailable because your device is not connected to the VPN" Product support	23	2321	November 5, 2020
openBalena VPN function openBalena	1	651	November 21, 2019
Unable to connect to devices Product support	33	1805	July 3, 2019

OpenBalena OpenVPN Service

Related topics