Both networks 192.168.0.0/24 andd 192.168.8.0/24 are connected to the same router. So you go across the router. Man when you’re outside that network you have to use the public IP to access the network.

@viragomann @randomPerson said in Cannot access any Web-Services (but can ping them) from OpenVPN Client: Now I get the following error message: Options error: Unrecognized option or missing or extra parameter(s) in pfSense-UDP4-12389-Julius-config.ovpn:12: dhcp-option (2.4.6) The problem is resolved, the extra space before the dhcp-option was causing trouble. Thanks for the help!

@paolone919191 Start a new thread, so we can get some specifics and offer some help.

I was finally able to solve this issue. There were multiple users experiencing the same issue. It got resolved by UNchecking "OpenVPN > Client Export > Certificate Export Options > Use Microsoft Certificate Storage instead of local files. Then "Save as default", export new installer en reinstall on client. Don't know yet what the root cause is, but this solved the issue on alle of the clients. Anybody here that knows what really is going on? Thanks, Thomas.

Johnpoz, you're totally right.. I connected an embedded Linux device (printer) to the network, and pinging works. So stupid of me, I was unaware Windows firewall blocks ping requests from other networks. Thanks a bunch!

VPN > OpenVPN, Servers. You can edit the resulting server any way you like.

So I don't have to turn openvpn on and off. I'm lazy.

@warheat1990 What is it? How Can I fix. Fix post is deleted.

@ILIKENETGATE said in VPN Question: @viragomann OK armed with all this information I couldn't wait until the weekend and got it done today. It works but really slows down the internet to about 30-40 MPS from my 150MPS. I guess I'll use the VPN service when I need it by turning it off under the services section. I did tun on the cryptographic engine in the settings since my 3100 has it but I didn't see much of a speed change. BTW for those reading the Vypr VPN customer link in the beginning of this, ignore pasting in the items listed in the advance section. When this was in place I could not connect to the VPN provider. When I removed it I could make the connection. right. i have to remove several options as well. check your send and receiver buffer. i usually use 256k

Its a very common issue.. Users don't normally think about it until they run into ;)

And definitely check the date. If it is not current, they are probably wrong as things exist today. There should be no Custom Options necessary to get almost all configurations working. It should all be able to be handled using the server and Client-Specific Overrides in the pfSense GUI. You might be able to tweak some additional throughput out of it or overcome PMTU problems etc with custom options, but basic functionality should be obtainable without them.

@Rico Figured it out. Had to call up ISP for port forwarding. Thanks for your help

If you are intending to bridge the clients into those separate networks, then it will require one server per network. If you are only looking to limit traffic, that could be accomplished with some work with overrides, rules, and so on, but it's still best to use separate servers (each with its own different CA structure) for complete isolation.

I've tried to set up firewall optimization options to conservative to keep idle connections open in hopes it would help, but it doesn't