I will take a look on those! Thanks for now!

@derelict I hear ya’. That’s a bummer, but makes sense... I could maybe I replace our existing router with another pfSense one and do a P2P server between both of them instead so the firewalls can talk to each other? xFi isn’t the best with their interface - far too simple. Home-Network friendly I suppose. Thank you for the help though.

Sorry to necrobump, but this should be pinned in official pfsense OpenVPN tutorials. Two years I've been using ~30-40Mps VPN being sure it's speed is limited by the provider. I just tested snd/rcvbuffer and fast-io and immediately landed on stable 60Mbps. Holy smokes! Thanks for making my life better :)

This was solved as you can't use a subnet that follows under the 10.1.0.0/16 VPC setup in AWS. 10.1.99.0 changed to 192.168.XX.X/24 subnet worked

I just noticed in the OpenVPN client log the following: WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1601', remote='link-mtu 1602' Where does these MTU values comes from? I have no MTU defined in OpenVPN client config. I have no MTU defined in OpenVPN server config. I have no MTU defined in WAN interface. I have no MTU defined in OpenVPN interface.

Thanks Rico. I already had and used the first set of instructions. I'm watching the first video now.

Well with Remote Networks not matching properly I would expect it not working, so put your main office network 10.11.0.0/16 there. Can you ping main office network clients from the remote side pfSense directly? -Rico

Perfect, thank you!!

@johnpoz said in Configure PIA (Private Internet Access) VPN on pfSense 2.4.4 only for specific hosts: kill switch Thanks!

So you just do Multiple Remote Statements? This would be the behavior then. Check out https://www.netgate.com/resources/videos/advanced-openvpn-on-pfsense-24.html which covers different Multi WAN tactics for OpenVPN (starting at 40:08min). I recommend you to watch the whole video tho. -Rico

noice

Hi, I figured it out my mistake and it's fix for good now. Thanks for the help. Have a nice week-end.

Anyone else has an idea? I'm out of ideas

If your routing and firewall rules allow it, it should just work. There are several variables to account for though, so we need more details. list itemPost your server1.conf and client1.conf. What are you allowing thru the tunnel? Post the firewall rules from the OpenVPN tab on both ends. Is the remote end using PFsense for DNS or something else? (e.g. AD, Infoblox, etc)

We found that trying to use CHAP failed every time without fail. Had to enable PAP to get this working.

There was a need to add route for specific traffic and change the OpenVPN settings to act as site to site VPN. It is now working. Thanks for your help @johnpoz @Rico