Ah, good to here. I suspect that the OpenVPN connection is stealing the default gateway when it is brought up. There is an option to allow the default gateway to change but I can't remember where it is off hand.  ::) I think it's disabled by default anyway. More likely is that the VPN adds a default route when it comes up. I think that is a changeable setting also. VPNs are not strong point of mine to be honest.  :) Steve

I am very intrested in this!! Please provide instructions! Best regards Kostas

Hi, Wondered if you can help. Do you know of any instructions I can use as a template to try and work out how to get my VPN service working? Thanks

Jimp, Thanks so much.  This did fix this issue.

i would advice updating to 2.0.3 which is the latest stable. Since 1.2.3 there have been numerous improvements, also making it much easier to setup openvpn.

@dhel: I'd suggest a few things to try- Add "tun-mtu 1500;" and "mssfix 1400;" to the OpenVPN "Advanced Configuration" Move off port 1194… it might be shaped on the provider's end. Wow, this did cause a dramatic difference once applied to both ends. I max out his upload receiving on my end perfectly fine testing with both SMB and HTTP, and he can now get around 1 to 1.1MB/sec from me, which is great in comparison to before. I technically can push out 5MB/sec with the fluff on the upload from FiOS and he should be able to receive that since he has 45Mbps down, but I guess it's better than nothing!

Re: OpenVPN - Ping LAN resources which has a different default gateway That did the trick ….Thank you .

Any help  on this please???

Hm… I can however add a few rules to the NAT. OpenVPN TCP/UDP * * 192.168.186.0/24 22 (SSH) 192.168.1.10 22 And this works... so I'll go this way ... If someone has any other solution ... please post it anyway thanks, p.

Hi, 1:1 NAT is only the incoming side… you also need outbound NAT. => Manual Outbound NAT generation ==> normally you can delete safely the autogenerated rules if you don't use IPSec but perhaps you want some of them modified. => add a new rule which is bound to your outgoing OpenVPN Interface the reverse NAT mapping rule... finished ;) (you don't have forgotten to open incoming firewall rules to needed services ?)

your log is not very helpful… Because of kernel: ifa_add_loopback_route:insertion failed I guess you also run into this problem/bug: http://forum.pfsense.org/index.php/topic,60231.0.html where this fix could help - if he is made correctly… actually he has problems on server side (but you can test it on client side) http://forum.pfsense.org/index.php/topic,60231.msg330670.html#msg330670

I'm going bonkers.  When I go to edit vars.bat, I get the message that "edit" is not recognised as a command.  WHAT???  I'm using Vista.

IIRC it's for the native windows OpenVPN GUI's 64-bit version and underlying binaries, not for the drivers.

Thank You. That worked.

I bought the book OpenVPN 2 Cookbook and was able to figure it out.

I've solved it, it was a stupid mistake…. on the machine I was trying to reach!!!!  >:( 192.168.129.253 it's the linux machine that I was trying to reach, it has a second eth interface with address 10.0.0.1 and (wrong!!!!) netmask of 255.0.0.0 So I was reaching the machine, but packets got forwarded to the wrong interface instead of going back, hence the timeout!! Putting the right netmask solved the problem, now everything works fine. Lesson learned!

So I figured it out. I made a couple of rules to set the traffic from the open VPN interface to the VLAN.