[Galaxy Note GT-N7000 Q&A, Help & Troubleshooting] _pigro_:
Hi all, total android noob here, be gentle :)

I'm coming from Nokia N900 (Maemo, which had an openVPN client/server app available).

I have openVPN server on my home Win XP box, and my N900 runs openVPN client. I use tap (not tun) for various reasons, and all VPN connections to my LAN are made using certificates that I issue to the clients from my own server.

Am I correct in understanding that in order to get access to my home LAN from my new Note via my current method, I would need to find a custom ROM for the note which included the tap (as well as/instead of) the tun module?

in case it helps, here is my current XP server config:

local 192.168.0.10
port 11194
proto udp
dev tap
dev-node openVPN
ca "c:\\program files\\openvpn\\easy-rsa\\keys\\ca.crt"
cert "c:\\program files\\openvpn\\easy-rsa\\keys\\server.crt"
key "c:\\program files\\openvpn\\easy-rsa\\keys\\server.key"
dh "c:\\program files\\openvpn\\easy-rsa\\keys\\dh1024.pem"

ifconfig-pool-persist ipp.txt
server-bridge 192.168.0.10 255.255.255.0 192.168.0.150 192.168.0.160
push "redirect-gateway def1"
push "dhcp-option DNS 192.168.0.1"
keepalive 10 120
comp-lzo
max-clients 2
;user nobody
;group nobody
persist-key
persist-tun
status openvpn-status.log
;log openvpn.log
;log-append openvpn.log
verb 6
;mute 20

... and my client config:

script-security 2
up /etc/openvpn/maemo-update-resolvconf
down /etc/openvpn/maemo-update-resolvconf
resolv-retry infinite
client
remote xxxxxxxxxx.no-ip.org 11194
dev tap0
proto udp
nobind
persist-key
persist-tun
ca /etc/openvpn/ca.crt
cert /etc/openvpn/n900.crt
key /etc/openvpn/n900.key
comp-lzo

like I said, I have zero experience with android and don't really want to rush too quickly into rooting and ROM'ing my new Note until I have pretty clear understanding of whether it will be worth it to gain the openVPN connectivity.

I could if required use a tun instead of a tap, but I spent a while getting the tap set up just how I wanted it (serving up an IP from a dedicated range on my home router DHCP and running all traffic - including http for the phone browser - through the VPN).

So, long story short - can I currently get openVPN on the note with a tap device & if so, how (in idiot-proof detail!!)?

TIA for any help you can offer :)

---------- Post added at 01:22 PM ---------- Previous post was at 01:03 PM ----------

I don't have too much faith in this, but I just went over to juniper's website and got accostd by a live chat agent before I'd even had a chance to read their FAQ's. here's the transcript:

[Julie] Welcome to Juniper! Is there anything I can help you with today?

[Visitor] I just bought a samsung galaxy note. I run openVPN on home server and am looking for a suitable client. I see Junos client is available for Note, will this work?

[Julie] Hi

[Visitor] hi

[Julie] Please hold, I am putting together some information for you. Is this a solution you are currently evaluating for your own company or a client?

[Visitor] my own company

[Julie] Yes, I believe it will work. Are you already in contact with a Juniper Reseller?

[Visitor] no, but I don't need a reseller? I just need to know whether your VPN client for Note will allow me to connect ot my existign openVPN installation?

[Julie] I believe yes.

[Visitor] great. I'll download it and give it a go then. THnaks for your help.

[Visitor] Bye

[Julie] You're welcome.

[Julie] Have a nice day.

has anyone actually tried an openVPN client connection via Juniper client with the note as yet?

---------- Post added at 02:02 PM ---------- Previous post was at 01:22 PM ----------

Forget that - just browsed the online doc's for Junos Pulse. It doesn't (V3.0) allow a client connection to an openVPN server, it appears only to support their own servers - the live chat agent was either stupid or just doesn't know what openVPN is (actually, that makes her stupid anyway if she works for a VPN solutions vendor!).

I'm not going to waste my time downloading this corporate bloatware unless anyone has actually got it to work?