--- title: How to scan an internal network using Open VPN description: Use OpenVPN to create a secure tunnel between our scanning servers and your network --- [Skip to content](https://support.pentest-tools.com/how-to-scan-an-internal-network-using-open-vpn#main-content) [![flat ptt_logo_RGB_alpha](https://support.pentest-tools.com/hubfs/flat%20ptt_logo_RGB_alpha.svg)](https://support.pentest-tools.com/) Open main navigation Close main navigation - [Raise a ticket](https://share.hsforms.com/1iXO7OCiAQV67C-9QIn-4Dgbqmk4) [Raise a ticket](https://share.hsforms.com/1iXO7OCiAQV67C-9QIn-4Dgbqmk4) How can we help you? - There are no suggestions because the search field is empty. 1. [Support Center](https://support.pentest-tools.com/) 2. [VPN Profiles](https://support.pentest-tools.com/vpn-profiles) June 26, 2025 # How to scan an internal network using Open VPN ## Use OpenVPN to create a secure tunnel between our scanning servers and your network If you can’t run the VM agent, you can also **set up an Open VPN tunnel **and **Import the configuration file **to the platform through the [VPN Profiles](https://pentest-tools.com/vpn_profiles) tab. This way, our scanners can reach the hosts from your internal network through the VPN tunnel. Let’s consider a scenario where we want to run the [TCP Port Scanner](https://pentest-tools.com/network-vulnerability-scanning/tcp-port-scanner-online-nmap) against a target inside the private network 192.168.1.0/24. The sample **OpenVPN server** can be publicly accessed at IP 139.162.209.132 on port 1194 (default for OpenVPN service) and it is also set as the **default gateway** for your internal target host. ### Step 1: Export the configuration file from the OpenVPN Server You should export the .ovpn configuration file from your OpenVPN server. This file contains information for an OpenVPN client to connect to the server. You can typically export this file directly from the web interface of your VPN gateway or router. If you want to install a new OpenVPN server inside your network, we recommend checking out this [script](https://github.com/angristan/openvpn-install) that simplifies the process. > As not all Open VPN configurations are compatible with the Pentest-Tools.com platform, the exported .ovpn file should look like the example below. You should **pay attention to the following lines**: - remote {your-external-ip} {port} – Make sure that your external IP is right and the **port is not blocked by any firewall**. **[Here](https://www.first2host.co.uk/f/open-port-iptables/) **is an iptables guide to properly open the VPN port. - proto {TCP/UDP}– We recommend using TCP over UDP for a more reliable connection. - dhcp-option DNS {internal-dns-ip} (*Optional*) – This is required if you have an internal DNS Server inside your local network and you want to scan targets by their hostname. ``` config.ovpnclientdev tunproto tcpsndbuf 0rcvbuf 0remote 139.162.209.132 1194resolv-retry infinitenobindpersist-keypersist-tunremote-cert-tls serverauth SHA512cipher AES-256-CBCsetenv opt block-outside-dnskey-direction 1verb 3-----BEGIN CERTIFICATE-----MIIDQjCCAiqgAwIBAgIUBa2MqM7dbcE5eePAwPituT+RqZAwDQYJKoZIhvcNAQELBQAwEzERMA8GA1UEAwwIQ2hhbmdlTWUwHhcNMTkwOTEyMTI1NDEwWhcNMjkwOTA5MTI1NDEwWjATMREwDwYDVQQDDAhDaGFuZ2VNZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMnIwLMKPAg8BzPPslPoprPi8FmoNVQfGopCHAZg1BaHXqWSg9pfWkUlNr4yIbsb9INw89pLYELsThDj+gBCRW/SMND/RaJo+VGBeThGnv31bXKetLtifO9sb8xucwnn0gfwr7yEBfkU/hAPYZM4gRPxjLBmWv8TEFdvrx6o6fGvCNuuG9+2qXLCUDpHnuvHO4lfeRlM+RPU4LhrL2GUOvRRTf17Xv4ttEo6NdxRNKkE+DeFCOPY ``` ### Step 2: Create a VPN profile with the Custom Open VPN option From the Settings > VPN Profile page, add a new VPN profile with the second option. ![](https://support.pentest-tools.com/hs-fs/hubfs/Knowledge%20Base%20Import/63e00291-1c87-463f-bb85-307ef0a75e1e.png?width=580&height=137&name=63e00291-1c87-463f-bb85-307ef0a75e1e.png) Upload your .ovpn file in the configuration window. You can also enable user authentication if your server has this setting.  ![](https://support.pentest-tools.com/hs-fs/hubfs/Knowledge%20Base%20Import/6e9ac962-9dc8-44a4-8735-ada701207cf0.png?width=444&height=639&name=6e9ac962-9dc8-44a4-8735-ada701207cf0.png) Once added, it is recommended to test the configuration by clicking the Play button in the Actions column. You are ready for your first internal scan if your VPN connection is successful. However, if you encounter any problems with the connection, you can troubleshoot the problem by viewing the connection logs (Press the View button from Actions). > **Please ensure the OpenVPN port is open to the internet** – this is the most encountered connection issue.   - [Getting started](https://support.pentest-tools.com/getting-started#main-content) - [Tips & Tricks](https://support.pentest-tools.com/getting-started#tips-tricks) - [First Steps](https://support.pentest-tools.com/getting-started#first-steps) - [Tools and Scans](https://support.pentest-tools.com/tools-and-scans#main-content) - [Network Infrastructure Testing](https://support.pentest-tools.com/tools-and-scans#network-infrastructure-testing) - [Authenticated Scanning](https://support.pentest-tools.com/tools-and-scans#authenticated-scanning) - [Frequently Asked Questions (FAQ)](https://support.pentest-tools.com/tools-and-scans#frequently-asked-questions-faq) - [Offensive Tools](https://support.pentest-tools.com/tools-and-scans#offensive-tools) - [Web Application Testing](https://support.pentest-tools.com/tools-and-scans#web-application-testing) - [Reconnaissance](https://support.pentest-tools.com/tools-and-scans#reconnaissance) - [Account and Billing](https://support.pentest-tools.com/account-and-billing#main-content) - [Billing and Payment](https://support.pentest-tools.com/account-and-billing#billing-and-payment) - [Account Management](https://support.pentest-tools.com/account-and-billing#account-management) - [Assets, Targets & Workspaces](https://support.pentest-tools.com/assets-targets-workspaces#main-content) - [Workspaces](https://support.pentest-tools.com/assets-targets-workspaces#workspaces) - [Assets & Targets](https://support.pentest-tools.com/assets-targets-workspaces#assets-targets) - [Reporting and Vulnerability Management](https://support.pentest-tools.com/reporting-and-vulnerability-management#main-content) - [Notifications](https://support.pentest-tools.com/reporting-and-vulnerability-management#notifications) - [Attack Surface](https://support.pentest-tools.com/reporting-and-vulnerability-management#attack-surface) - [Reporting](https://support.pentest-tools.com/reporting-and-vulnerability-management#reporting) - [Findings](https://support.pentest-tools.com/reporting-and-vulnerability-management#findings) - [VPN Profiles](https://support.pentest-tools.com/vpn-profiles) - [Integrations](https://support.pentest-tools.com/integrations) - [Automation](https://support.pentest-tools.com/automation#main-content) - [Scheduler](https://support.pentest-tools.com/automation#scheduler) - [Scan Groups](https://support.pentest-tools.com/automation#scan-groups) - [Pentest Robots](https://support.pentest-tools.com/automation#pentest-robots) - [Change Log](https://support.pentest-tools.com/change-log) - [Data Security](https://support.pentest-tools.com/data-security) [![Chill listening crop-3](https://support.pentest-tools.com/hs-fs/hubfs/Logo%20negru.png?width=109&height=40&name=Logo%20negru.png "Chill listening crop-3")](http://Pentest-Tools.com) [Go to Pentest-Tools.com ](https://pentest-tools.com/) Copyright © 2026 PentestTools S.A.