OK re-enabled slbd today and it works, even after slbds ICMP poll states DOWN and filters are reloaded, daemons stay alive. I think the problem is related to two things:

one interface changing (dhcp, dis-/enabling) reloading openvpn daemons via the stated command (sh killall -HUP openvpn)

The SIGHUP seems to kill a random number of daemons while restarting them (whysoever). ATM I'm ordering new CF-cards to try a clean new installation on one of these and do some modifications. If anyone knows more about that "restart phenomenom" or has problems alike I would be glad to hear some comments.

If you do that you could as well do what albertmm did and have a separate openVPN server ;)

This is exactly what's happening to me as of now: i needed to reboot the adsl router at the office, then trying to connect to the vpn simply doesn't work and "inactivity timeout" pops up. In my case i'm trying to connect to the vpn manually via the windows openvpn gui, it always worked great and this is the first time i've got to reboot the adsl router so i never experienced this problem before..
Any clue on what it could be?

Just for your information. I found a much easier fix for this problem with Tunnelblick. Apply the small patch from http://code.google.com/p/tunnelblick/issues/detail?id=8#c10 and everything works fine.

I'm running Vista and since i didn't want to install the RC i got it running adding these lines to the openvpn client configuration:

route-method exe route-delay 2

That did it for me.

Yep…sorry  :(

I like your "backup" definition  :)

Thank you for all your answers !

I finally opted for manually setting up OpenVPN in a fresh Debian install  ;D !

It works like a charm  :) !

Could you explain how to do that? This is my first experience with setting up any kind of VPN.

Details of the error message (logs etc) and your configuration would be useful.  There are also forums for people who's primary language isn't English if you would find it easier working in your native language.

Ok this was a tricky one:

I was doing a migration from ipsec to openvpn (bc/ ipsec does not support site-to-site where B as has a dynamic IP) and i still had my ipsec config activated - so this somewhat confused pfsense.

I disabled the tunnels in question on the ipsec page and my openvpn started working!

Thanks got it working now.

Answering myself:

If you don't set a LAN rule as described in the following thread, it won't work:

http://forum.pfsense.org/index.php/topic,7840.0.html

After adding the LAN rule all is fine… I added only the WAN rule which was one to less!!

Greetz
Mircsicz

quick update : procedure doesn't work for me

during boot, I get an error regarding the tap0 device (about the fact that I cannot be added to the bridge)

I'm not sure how to set up the tap0 - can anyone give me some guidance ?

thanks

Hi folks!

Same problem again, I haven't done anything with the FW since my last post.
So my solution now is to remove one instance of OpenVPN and only use one.

I have another PfSense with OpenVPN at home that has been working with one instance since march this year.

So it could be a limit in OpenVPN, and hopefully it will be solved in 1.2.1 or 1.3.

Regards
Beach

Hi,
I was having similar issues at one potin. Where my problem was is that i was copying the ta.key (The TLS key) that is generated when you create your tunnel on the server (pfbox) just using standard copy/paste. For some reason odd formatting was being added into the file and it would not work and would throw the error like you are getting because of an incorrect tls.

I suggest enableing SSH access on your PFbox and using SCP to copy the "server1.tls-auth" key to your client or to another box where you can put it on a jumpdrive then move it to your client.

Also, i would make sure in your  "server mode" for your openVPN server that it is not set to "Remote Access (SSL/TLS + User Auth ) if you have not set up your client to use a username/password. Otherwise you will get this error as well.

If you do want to use the user auth.. Add this to the top of your client config and try it out. (It will pop-up a username/password box for you).

–auth-user-pass

If you are still having problems please post back with your config from your client and server and i will try to help you debug your settings.