@sysgi1 Anyone? Is there any issue with OpenVPN in a multi-ip environment?
I think something is broken in the last version (I never had this problem prior to 21.05 upgrade)

Thank you

I'm going to make the assumption that HOME is an interface that you assigned to the VPN client. In pfSense, traffic applies to the interface where the traffic arrives. So in this case, on HOME you need to allow traffic from source 192.168.0.0/24, but instead you have source as LAN net. LAN net will never be the source for traffic arriving at that interface.

@bcruze
Guess not.
Showing version numbers is important to know, I agree, and is also important for hackers.

Most "payware" VPN services compile their own VPN version from the open source tree.

Bah, I hate posting and then saying Nevermind, but I already found some closure.

After multiple attempts on my Linux Desktop, I decided to just get the Certificate data straight out of terminal with the openssl command without the -noout.

Entering this text in the text box (the BEGIN CERTIFICATE / END CERTIFICATE contents) with absolutely no modification worked.

I compared the two entries side by side, and it looks like my Text Editor was still adding markup language. It's a silly thing, but if someone searches for this in the future, all I can say is keep trying to make sure your certificate data is getting imported with absolutely no modification from your text editor.

@audiobahn This is just an OpenVPN server on the NetGate with various devices connecting. I resolved my issue by redoing the OpenVPN server without the use of a TLS cert. Oddly enough, the DNS resolver suddenly stopped working and still has issues even after restarting the service. Haven't been able to reboot it yet. hmmmm... glad you got yours working

@mucip said in Site to Site and Server-Client VPN in same Pfsense?:

very helpfull drawing

Your more than welcome - yeah if more people would post up drawings right off the bat, stuff would go some much quicker in figuring out the issues..

I always like to have a drawing - even if just for reference on what trying to accomplish.. It helps to make sure everyone on the same page if you will ;)

@bob-dig said in unable to access surfshark via openvpn:

@vjer2021 First it is SHA512 not SHA-3 512.

low and behold, that solved. it. thank you Bob. You're a gentleman and a scholar. and curse my eyesight.

@fairy Examining how your computer connects to your VPN can help you determine why and where the connection is slowing down.

@chrischambers
Yes, if you want to policy route the traffic from certain devices through the vpn, you should have this option checked on both.

You can also start / stop the client services on the OpenVPN status page when you have both enabled.

@johnpoz yes, I have it there. Just curious if I'm the only one with this (little) problem.

@droidus
Check the system and OpenVPN log for hints.

@marvosa here are my screenshots.
Firewall Rules - NAT - Port Forward.png

Firewall Rules - Floating.png

Firewall Rules - WAN.png

Firewall Rules - LAN.png

Firewall Rules - WLAN.png

Firewall Rules - OpenVPN.png

All is working now, I had to add a firewall rule to allow ICMP, and then obviously TCP/UDP traffic too.

I was confused because the VPN subnet said 172.16.100.0/28 but I was getting an IP of .18 for some reason, but none the less it still works.

Thanks anyway all sorted now.

I don't know what changed (aside from me opening this topic), but suddenly it is working now...

@johnpoz Many Thanks.