@jrfernandez The VPN clients might probably block access from outside of their subnet.

@jimp said in OpenVPN Data Channel Offload (DCO) failure, service does not start after upgrade to version 22.05-RELEASE (amd64): If you see this, your system did not fully complete the upgrade to 22.05. You should run pfSense-upgrade -dy from an SSH or serial console shell prompt. I had a fresh install from 2.6.0 > 22.01 > 22.05 and this issue appeared. This was the solution to the issue.

@viragomann and @Jarhead well I was able to test from my phone tonight and realized its not going to work on my phone so it'll have to be on a PC when i do this. Thank you guys for your help today! I am stoked this is working for the VPN.

Haven't found a way to use Captive Portal on the WAN interface. So, creating the LAN interface now everything works fine except when I activate the CP. Any petition is redirected to the CP page even after the session is initiated.

@gbitglenn Just wanted to say came across this while trying to troubleshoot an OpenVPN issue. it is helpful. thank you for sharing this information and being detailed.

@damianhl said in Disconnections to pfsense from OpenVPN: This is an old version of pfsense (2.4.3-RELEASE), I know I need to update this but I could not do this yet. Yes, you should consider to upgrade seriously. The client log indicates a broken TLS session. A reason for this could be that the system time on pfSense doesn't match with the clients time. Probably you can check this in case the issue occur again.

@viragomann Thanks for the reply! I have checked this box, however when I do reload the tunnel (momentarily dropping it) traffic does route to the other network card, so it must not be blocking it

@ghost-0 said in NordVPN doesn't reconnect after routine periodic VPN server maintenance or other issues...: Am I doing something wrong? Calling the Comcast technician when your VPN service isn't working is wrong. Other than that, no. It is not that comfortable running vpn services on pfSense. Worst thing, often different clients get the same address and gateway and don't work anymore but pfSense doesn't care.

@viragomann I see. This is all still ridiculously new to me. I will make adjustments. Yeah still not working. I'm about to give up on this.

@hispeed Great! Another triumph!

@jims said in Connection to openvpn cloud server - use connector or user ovpn file?: but both times I used the client import and am not connecting. So you should going to troubleshoot it. Some information in the log?

@viragomann sorry for trouble mate, i figured out the problem, it's the etc/hosts.allow of the server

@rico yes on both sides [image: 1659664513373-0243b5c2-1786-43dc-9ba6-6aeddb6d246e-image.png]

@jims Thing is I don't know what might be odd because I have done little to none of this kind of thing before.

@pljungstrom The error message looks like if the client cannot reach the server. Sure that you only renewed the CA cert before you got this? Check the client settings for the correct server name or IP and port.

@vasliy Hello Vasily, Unfortunately not, in the end I created a vm for that subnet and rolled my own setup on Linux.