Port 1194 (OpenVPN)
Port 1194 is the registered port of OpenVPN. A server started with default settings listens on UDP 1194; clients connect to it to join the VPN.
- Service
- OpenVPN
- Protocol
- TCP and UDPUDP by default. OpenVPN can also run over TCP (proto tcp), which helps on networks that block UDP but is slower.
- IANA registry
- Officially assigned: openvpn (OpenVPN), TCP/UDP
Check if a port is open on your IP
We only check the address you are visiting from, one TCP port at a time. You cannot enter someone else’s address: this is not a port scanner.
Is it safe to open port 1194?
OpenVPN is designed to face the internet, so opening 1194 is normal for a VPN server. Keep the software updated, use certificates rather than passwords alone, and add tls-crypt or tls-auth so that the server ignores packets without the shared key.
Sources
“Port 1194 is already in use”: how to fix it
The error means another program is already listening on port 1194. Find its process ID (PID), then stop that program or start yours on a different port.
Windows (Command Prompt or PowerShell as administrator)
netstat -ano | findstr :1194taskkill /PID <PID> /FmacOS
lsof -nP -iTCP:1194 -sTCP:LISTENkill <PID>Linux
sudo ss -ltnp | grep :1194sudo lsof -i :1194sudo kill <PID>Replace <PID> with the number from the last column (Windows) or the PID column (macOS, Linux).
How to open port 1194
Router: in the router’s admin page find Port Forwarding (sometimes Virtual Server or NAT), forward TCP + UDP port 1194 to the local IP of the computer running the service, and save.
Windows Defender Firewall (PowerShell as administrator)
New-NetFirewallRule -DisplayName "Port 1194 TCP" -Direction Inbound -Action Allow -Protocol TCP -LocalPort 1194New-NetFirewallRule -DisplayName "Port 1194 UDP" -Direction Inbound -Action Allow -Protocol UDP -LocalPort 1194Linux with ufw
sudo ufw allow 1194/tcpsudo ufw allow 1194/udpLinux with firewalld
sudo firewall-cmd --permanent --add-port=1194/tcpsudo firewall-cmd --permanent --add-port=1194/udpsudo firewall-cmd --reloadThen run the check above. If the port is still closed, see why a port can look closed below.
Why a port can look closed when your server is running
Most home networks sit behind a router doing NAT: the router owns the public address, and your computer has a private one such as 192.168.1.10. A connection from the internet reaches the router and stops there unless you add a port forwarding rule to your computer.
Many mobile and some home providers go further and use carrier-grade NAT (CGNAT): several customers share one public address, and your router itself gets an address from 100.64.0.0/10. Then no rule on your side can open a port; ask the provider for a public IP or use a tunnel or VPN service.
Even with forwarding in place, the firewall on the computer (Windows Defender Firewall, ufw, firewalld) must allow the port, and the program must listen on all interfaces (0.0.0.0), not only on 127.0.0.1.
UDP cannot be checked this way: a UDP service usually stays silent to packets it does not understand, so “no answer” means nothing. This check uses TCP only.
Frequently asked questions
What is port 1194 used for?
Port 1194 is the registered port of OpenVPN. A server started with default settings listens on UDP 1194; clients connect to it to join the VPN.
Is port 1194 TCP or UDP?
UDP by default. OpenVPN can also run over TCP (proto tcp), which helps on networks that block UDP but is slower.
Is it safe to open port 1194?
OpenVPN is designed to face the internet, so opening 1194 is normal for a VPN server. Keep the software updated, use certificates rather than passwords alone, and add tls-crypt or tls-auth so that the server ignores packets without the shared key.
How do I free port 1194 if it is already in use?
Find the process: on Windows run netstat -ano | findstr :1194 and stop it with taskkill /PID <pid> /F; on macOS or Linux run lsof -i :1194 and stop it with kill <pid>.