How To Deploy The OpenVPN Appliance in ESXi

The Open VPN Appliance is a great way to quickly setup a small VPN server without any of the command line hassles. They give you a two user license for free. For home use this should be enough. Their appliance comes in an OVA format which will allow you to deploy it on ESXi very easily.


First let’s begin by downloading the appliance we are going to import to ESXi. I got the link from their main site:

img 55cd345e1b723

The OVA is here :

Once the download is complete login to your ESXi host.

img 55cd348eb7fb8

Then on the top left corner open up File > and click Deploy OVF Template.

img 55cd34a978774

Then browse to where you downloaded the OVA file.


img 55cd34c612aa7


Click next on this screen it’s just an overview.

img 55cd34d5ec3ad

Name it something of course.

img 55cd34e32b0a6

Choose your storage…

img 55cd34f468ee7

Choose how you’d like to store it, it’s usually best case to use Thin Provision because it will save you a lot of disk space. More on this in another article.

img 55cd351f23157

Leave the defaults here.

img 55cd35315bf6a

Power it on and deploy.

img 55cd353d00e15

Deploying from network may take anywhere from 20 seconds to 2 minutes depending on your LAN speed.

img 55cd3547ee759

Once powered on right click the VM and choose open console.

img 55cd357a238c6

Now login here with user: root and pass : openvpnas


img 55cd35d219c46

agree to their terms…

img 55cd35e5309c6

Then choose the defaults for all these options if you want the default ports to be used (443 for vpn, 943 for admin ui, access to lan, route all traffic through to lan, route dns traffic through lan.

For the last option enter no and choose a different username.

img 55cd364d5b2e5

Now you’ll see something this, meaning everything is done and you should browse to the webhost to get started.

Of course your LAN IP will be different. Don’t forget the https as the host isn’t listening on port 80.

img 55cd3689cfedd

Once at the page login with the connect feature and it will allow you to download the OpenVPN client and the profile!

img 55cd36db366c0

img 55cd36e39239d

Install the client downloaded…

img 55cd36f368a34

Now in your taskbar you should have the client running like so…

img 55cd3733a2de3


Other things to note:

The profile downloaded is for my LAN IP because I browsed to the LAN address (my server won’t have the webserver NAT’d because I like obscurity.

Make sure you either give the device a static IP, or assign it a DHCP reservation on your server (probably your home router). Google how to do this.

You will also need to setup your port forwarding (NAT). Since I chose the defaults I will forward 443 (external) to 443  (internal) to my LAN IP of my host.

You will want to forward UDP and TCP because the client can use both. (preferably UDP for speed).

If you have a static IP then just add that in the field after pressing connect on the client here…

img 55cd389c02b06

If you have a dynamic IP then look at a dynamic DNS client that will run on your home PC to always update your DNS hostname to the current IP. Since I have a static public IP

I create an A record for a domain I own where it’s DNS is hosted. Then I simply call it remoteaccess.<mydomain>.com this way I don’t need to remember my public IP.










Leave a comment