• Openvpn Site-to-Site PKI Routing Help [SOLVED]

    Locked
    4
    0 Votes
    4 Posts
    3k Views
    H

    I knew it was one line and I knew it was going to slap me when I figured it out.

    On GW1 (Cisco router) all I needed to do put a route that forwarded all 192.168.6.0/24 back to 192.168.3.1

    or

    ip route 192.168.6.0 255.255.255.0 192.168.3.1

    ;D

  • Multiple VPN Clients and DNS

    Locked
    1
    0 Votes
    1 Posts
    1k Views
    No one has replied
  • OpenVPN GUI trashed

    Locked
    7
    0 Votes
    7 Posts
    4k Views
    jimpJ

    Yes, just do a manual update to the same version you have.

    You might also want to install smartmontools and run a hard drive test (See http://forum.pfsense.org/index.php/topic,26626.0.html for how to install/run a test) and see if any of the S.M.A.R.T. indicators point toward a hardware failure.

  • Local network is not reachable through the vpn-tunnel

    Locked
    7
    0 Votes
    7 Posts
    3k Views
    L

    Thanks for the answer. That helps me a lot. I will go and recreate my local network.
    It's a very good forum and keep it up.

    Greetings l084

  • How to view the OVPN server.conf via shell?

    Locked
    3
    0 Votes
    3 Posts
    5k Views
    jimpJ

    If you just want to view it, use "cat" not "vi".

    And with cat, you can also do that from the GUI under Diagnostics > Command

  • Best way to VPN two pfsense boxes over the internet?

    Locked
    7
    0 Votes
    7 Posts
    4k Views
    T

    What would the client.conf look like for using PKI on the OS?

    Thanks

  • Howto from C't

    Locked
    7
    0 Votes
    7 Posts
    3k Views
    M

    I changed the iroute to "iroute 192.168.0.0 255.255.255.0;" and did some testing with a linux based vmware host as client. With this client I connected successfully and could also ping in both directions!!

    So the problem seems to be my home-router, which is an embedded version of 1.2.3… So I installed tcpdump and did some capturings. All I could see is that no packages are arriving at the tun interface's. So the problem seems to be the routing!

    so if someone with more routing experience on pfsense could give me a hand?

    Greetz
    Mircsicz

    P.S.: here's an output from tcpdump:

    \ [mirco@macbook-pro-wlan.mirco.home ~] 4$ ping 192.168.115.2 PING 192.168.115.2 (192.168.115.2): 56 data bytes 36 bytes from wall.mirco.home (192.168.0.1): Redirect Host(New addr: 192.168.0.1) Vr HL TOS  Len  ID Flg  off TTL Pro  cks      Src      Dst 4  5  00 0054 6d9c  0 0000  40  01 1878 192.168.0.66  192.168.115.2 Request timeout for icmp_seq 0 36 bytes from wall.mirco.home (192.168.0.1): Redirect Host(New addr: 192.168.0.1) Vr HL TOS  Len  ID Flg  off TTL Pro  cks      Src      Dst 4  5  00 0054 4fd4  0 0000  40  01 3640 192.168.0.66  192.168.115.2 Request timeout for icmp_seq 1 ^C --- 192.168.115.2 ping statistics --- 2 packets transmitted, 0 packets received, 100.0% packet loss [root@wall.mirco.home]/root(8): tcpdump -i sis0 icmp tcpdump: verbose output suppressed, use -v or -vv for full protocol decode listening on sis0, link-type EN10MB (Ethernet), capture size 96 bytes 19:51:40.556932 IP macbook-pro-wlan.mirco.home > 192.168.115.2: ICMP echo request, id 30693, seq 0, length 64 19:51:40.557817 IP wall.mirco.home > macbook-pro-wlan.mirco.home: ICMP redirect 192.168.115.2 to host wall.mirco.home, length 36 19:51:41.555681 IP macbook-pro-wlan.mirco.home > 192.168.115.2: ICMP echo request, id 30693, seq 1, length 64 19:51:41.556078 IP wall.mirco.home > macbook-pro-wlan.mirco.home: ICMP redirect 192.168.115.2 to host wall.mirco.home, length 36 4 packets captured 50 packets received by filter 0 packets dropped by kernel
  • How to configure SSL Open VPN for Asterisk VOIP calls

    Locked
    4
    0 Votes
    4 Posts
    3k Views
    Cry HavokC

    Any VPN will have an overhead.  I can't find any product called "Simple VPN" it's hard to say much more than PPTP and IPsec should have slightly lower overhead than anything using SSL.

  • All TAP-Win32 adapters on this system are currently in use.

    Locked
    15
    0 Votes
    15 Posts
    58k Views
    jimpJ

    Perhaps your current system shipped with driver integrity checking disabled. Google for it, there are ways to turn it off.

  • VPN tunnel with no encryption

    Locked
    5
    0 Votes
    5 Posts
    5k Views
    jimpJ

    VPN would add overhead to VOIP calls, it wouldn't help call quality, it may hurt it.

    The only advantage might be that it would look like a different protocol to your ISP's equipment and may be bypassing some QoS in places.

    It depends on what kind of filtering is being done by your ISP, but they could detect and block VPN traffic if they have powerful enough equipment to run protocol analysis on every connection that passes through their network.

  • Bridged OpenVPN (tap) possible?

    Locked
    2
    0 Votes
    2 Posts
    2k Views
    S

    Our staff are able to access windows shares over a bridged (tun) openvpn connection just fine. I looked into a bridged network, but it seemed to be too much of a headache to make it work on pfsense.

  • Only UDP/123 works

    Locked
    1
    0 Votes
    1 Posts
    1k Views
    No one has replied
  • Client-Specific static IP doesn't work

    Locked
    2
    0 Votes
    2 Posts
    2k Views
    jimpJ

    The addresses are assigned out of the /30, not exactly what you specify.

    This should mean that…
    172.16.0.0/30 - Client .2 -> Server .1
    172.16.0.4/30 - Client .6 -> Server .5
    172.16.0.8/30 - Client .10 -> Server .9
    172.16.0.12/30 - Client .14 -> Server .13
    172.16.0.16/30 - Client .18 -> Server .17
    172.16.0.20/30 - Client .22 -> Server .21

    Try putting in .8/30 and see if your results are any different.

  • [SOLVED] Issue with OpenVPN Client Export on pfSense 2.0-Beta4

    Locked
    13
    0 Votes
    13 Posts
    35k Views
    D

    Success!! After updating to the latest revision, and redoing all the certs and the OpenVPN Server; I am now presented with a package installer link. I am now having an issue with my VPN connection timing out when I connect to it using my phone, but that is a story for another time and another forum post. Thank you jimp for your help, and all the hard work you and the pfSense group does.  I definitely owe you one.  :D

  • NAT a OpenVPN

    Locked
    2
    0 Votes
    2 Posts
    2k Views
    jimpJ

    You can assign tun0 as an interface under Interfaces > (assign), though check the doc wiki for OpenVPN filtering on some more specific instructions.

  • How to retrict IP address using openvpn on pfsese

    Locked
    4
    0 Votes
    4 Posts
    3k Views
    Cry HavokC

    How did you generate and issue the keys before?  You run the revoke steps there.  If you don't still have that device, and the master CA key, then you have to re-issue all certificates, including the CA and server keys.  You should also take steps to ensure that you can revoke keys in future.

  • OpenVPN Routing with Multi-WAN/LAN

    Locked
    1
    0 Votes
    1 Posts
    3k Views
    No one has replied
  • OpenVPN Througput: What to Buy? Intel Atom or Alix hardware crypto?

    Locked
    5
    0 Votes
    5 Posts
    6k Views
    J

    Hello,

    ssooooo, I bought the VPN1411 and it did … nothing. At least not to the OpenVPN througput, using any Engine my OpenBSD offered (cryptodev too).

    I will test a little more, but I guess now it's an Atom I have to go for. What a shame.

    Greets

  • 2 OVPN servers with one set of server/client certificates/keys/etc.

    Locked
    3
    0 Votes
    3 Posts
    2k Views
    M

    Excellent. Thanks again.

  • TLS Error: TLS handshake failed

    Locked
    2
    0 Votes
    2 Posts
    5k Views
    Cry HavokC

    Client and server config files?

Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.