So, you're basically looking to build a site to site tunnel.  Have you checked the wiki?  You have two options, Shared Key or PKI: https://doc.pfsense.org/index.php/OpenVPN_Site_To_Site https://doc.pfsense.org/index.php/OpenVPN_Site-to-Site_PKI_(SSL) If you require certificates, then PKI is what you want.

@Gertjan: @Mr.: ….. UNLESS it is on your own LAN and you are both the only sender and receiver. With or without the mail server on the other side of the planet ?  ;)

So as an update, the reason it seems that I could not get to certain sites was due to the machine involved had not been assigned an IP by the Pfsense DHCP server and so it was not routing correctly. I ended up assigning a static IP to the machine and then forcing it to a new IP which resulted in the machine now working as expected. Patrick

I've had a couple random issues in the past when setting up new clients, and what fixed it for me was to uninstall OpenVPN on the machine, use the client export to download again, then reinstall. If this doesn't work (or if you've already tried this), please post the log that shows the errors & someone on this forum should be able to figure out how to resolve this.

The connectivity issues were remote users weren't able to log into any of the servers in the LAN.  They got a "server is not available" error.  All these were virtualized on one particular machine.  When trying to log in to the virtual machine itself via either the vSphere client or web client, the connection timed out.  I logged in via OpenVPN and managed to RDP into the DHCP server, then I could use the web client.  (I installed VMWare tools on the machines that didn't have them already and for some reason they had connectivity again.  Still working on why that happened, too.) The servers are now reachable as they were before, but the vSphere client and web client are still nonfunctional from outside the LAN.  I saw the DHCP address and thought that might have been my issue, but I'm guessing that it isn't. Time to figure out just what else could have made this happen.  I appreciate your time, jammcla.

Sorry for the delay in responding.  The remote user malfunctioned and didn't do it right.  Uninstall of client and reinstall solved the problem.

As has been said, you do not need anything in custom options to do what you need to do. Are you trying shared key or SSL/TLS? If shared key you have to duplicate reciprocal routes and tunnel network settings on the client side. You cannot push to the client when using shared key. If SSL/TLS you can push them to the client from the server. If using a tunnel network larger than /30 and are using SSL/TLS you ALSO have to set a Client-Specific Override on the server for the client setting the remote network there.

@johnpoz: What is your link speed? FastEthernet LAN between my pfSense box and my ISP Internet gateway. ADSL WAN link encapsulation IPoE 8000/500 Kbps dl/ul on my Internet gateway

have you figure out the problem can you explain what you have done to get the freenas under openvpn running as i am unable to access my nas under openvpn though i can run my dvr and printer remotely but no way for my nas4free

Is what about what better than what?

Hmm, even with rules that allow everything, still no success..

You referred to an article that referenced setting separate, static addresses. That's what was provided. I do not think there is another way to set another pool in a CSO. I could be wrong. I would just run another server for that.

Hi, Thanks for the reply. You are correct: it does work out of the box. T he probleem seems to be just ONE system (and that happened to be the one I was using as a reference to check if it works) that cannot be reached. I will further investigate the problem with this one system but it is probably not of interest to the community what the problem is so we can close this thread. regards.