@mucip said in Site to Site and Server-Client VPN in same Pfsense?: very helpfull drawing Your more than welcome - yeah if more people would post up drawings right off the bat, stuff would go some much quicker in figuring out the issues.. I always like to have a drawing - even if just for reference on what trying to accomplish.. It helps to make sure everyone on the same page if you will ;)

@bob-dig said in unable to access surfshark via openvpn: @vjer2021 First it is SHA512 not SHA-3 512. low and behold, that solved. it. thank you Bob. You're a gentleman and a scholar. and curse my eyesight.

@fairy Examining how your computer connects to your VPN can help you determine why and where the connection is slowing down.

@chrischambers Yes, if you want to policy route the traffic from certain devices through the vpn, you should have this option checked on both. You can also start / stop the client services on the OpenVPN status page when you have both enabled.

@johnpoz yes, I have it there. Just curious if I'm the only one with this (little) problem.

@droidus Check the system and OpenVPN log for hints.

@marvosa here are my screenshots. [image: 1633883990588-firewall-rules-nat-port-forward.png] [image: 1633884009576-firewall-rules-floating.png] [image: 1633883999380-firewall-rules-wan.png] [image: 1633884021253-firewall-rules-lan.png] [image: 1633884027850-firewall-rules-wlan.png] [image: 1633884033258-firewall-rules-openvpn.png]

All is working now, I had to add a firewall rule to allow ICMP, and then obviously TCP/UDP traffic too. I was confused because the VPN subnet said 172.16.100.0/28 but I was getting an IP of .18 for some reason, but none the less it still works. Thanks anyway all sorted now.

I don't know what changed (aside from me opening this topic), but suddenly it is working now...

@johnpoz Many Thanks.

@viragomann I tried disabling the port-forward rule but the connection didn't drop at all. Maybe I need to kill the states on the firewall but can't do that during production hours without disruption. I haven't actually disconnected the primary WAN either. I suppose I could try that after hours for a real test. I'm adding 2FA to our VPN connections so this is the perfect time to make the connections more robust with failover as well.

@jfassad Thanks a lot for the info. I'll give it a shot!

@thisisbenwoo Do you have a Firewall -> NAT -> Outbound rule for your VPN Network? Mine looks like this: [image: 1633443722934-screen-shot-2021-10-05-at-9.21.56-am-resized.png]

@gremblin Hi, I'm sorry I can't help. But I don't have this setup in pfSense any longer.

@jarlel adding a me too

@gwizzle What solved the problem? there is still no checkbox for nopool ?

@viragomann said in TLS ERROR with pfsense 2.5.2: @hardousse Looks like the client are not able to access the pfSense WAN. Do you have a public WAN IP? Not a CGN. Do you have WAN firewall in place allowing the VPN packets? Ensure that the packets arrive on your WAN. Use the packet capture tool from the Diagnostic menu to investigate. thank you for help yes its public ip and my firewall blocked the traffic i reinstall all and now everything working. Best reagrds