Skip navigation

Duo Security is now a part of Cisco About Cisco

Effective October 28, 2019 Duo Security will be transitioning to Cisco's Privacy Statement. View the Duo Privacy Data Sheet.

Contact Sales Free Trial

Try Duo's trusted access solution now.

Free Trial
Documentation

OpenVPN FAQ

Last Updated: June 19th, 2018

Contents

Related

This configuration is for the OpenVPN Community Open Source Software Project. Refer to the OpenVPN AS documentation if you're using OpenVPN Access Server.

My OpenVPN server must send HTTPS requests through a proxy

You can use an HTTPS Proxy when communicating with Duo Security's service. Add the proxy's host and port to the plugin line in OpenVPN's server configuration file (e.g. /etc/openvpn/openvpn.conf):

plugin /opt/duo/duo_openvpn.so IKEY SKEY HOST PROXY_HOST PROXY_PORT

The proxy must support the CONNECT protocol.

Is it possible to have OpenVPN send an automatic push to authenticate?

You can configure OpenVPN to send a push request automatically at logon as follows:

  • Make sure your OpenVPN server is at least version 2.1.0.
  • Update the Duo plugin to the latest version from GitHub if not version 2.1.
  • Add auth-user-pass-optional to the OpenVPN server configuration file (eg. /etc/openvpn/openvpn.conf).
  • remove auth-user-pass from the your users' OpenVPN client configuration file.

Additional Troubleshooting

Need more help? Try searching our OpenVPN Knowledge Base articles or Community discussions. For further assistance, contact Support.