I am trying to block SSH access to my VPS from Internet, the idea is to block incoming SSH port using DigitalOcean cloud firewall for public IP interface. To connect to my VPS I am planning to SSH the private IP via VPN (OpenVPN).
Currently I already have OpenVPN server running and can ping the it self VPN server private IP from my notebook. But somehow I can’t ping/access other private IPs from my notebook.
Please help how I can achieve this scenario?
This textbox defaults to using Markdown to format your answer.
You can type !ref in this text area to quickly search our full set of tutorials, documentation & marketplace offerings and insert the link!
Hi there,
I’ve just tested this with the 1-Click OpenVPN installation from the Marketplace:
https://marketplace.digitalocean.com/apps/openvpn-access-server
During the setup, the private subnets should be detected automatically and you will be asked if you want the private sunets to be accessible to clients by default, eg:
Private subnets detected: ['10.19.0.0/19', '10.135.0.0/16']
Should private subnets be accessible to clients by default?
> Press ENTER for default [yes]:
If you set that option to yes, when you are connected to the VPN you should be able to access the rest of the Droplets within that same VPC.
If you did not select that option during the initial setup, you can update it via the OpenVPN Access Server’s web interface. Here’s how to find it:
- Log in to the admin web interface. Usually, the URL is
https://your_server_ip:943/adminunless you’ve changed the port - Go to VPN Settings.
- You should find the option “Should client Internet traffic be routed through the VPN?” Ensure this is set to “Yes”.
- Below that, you should find “Should clients be allowed access to networks on the server side?” Make sure this is also set to “Yes”.
Let me know how it goes!
Best,
Bobby
Become a contributor for community
Get paid to write technical tutorials and select a tech-focused charity to receive a matching donation.
DigitalOcean Documentation
Full documentation for every DigitalOcean product.
Resources for startups and AI-native businesses
The Wave has everything you need to know about building a business, from raising funding to marketing your product.
The developer cloud
Scale up as you grow — whether you're running one virtual machine or ten thousand.
Start building today
From GPU-powered inference and Kubernetes to managed databases and storage, get everything you need to build, scale, and deploy intelligent applications.
