To ensure the LAN rule with the NordVPNGatewayGroup will be applied you have to lift it up to the second position. Otherwise the rule allowing LAN net to any will be applied and the traffic is directed to the WAN GW.

Thanks for the reply! I had no idea about specifying subnets in the config file; I'll go read up on that more. Yes, I am connecting from behind another router (at work). I'm trying to access a server that's on a separate VLAN than what OpenVPN puts me on. It looks something like this: Work PC --> Work Router --> {WAN/Internet} --> pfSense --trunk--> switch --> server Where in pfSense do I need to add the subnets that you are mentioning? Also, I shouldn't have to worry about tagging my traffic to go through the switch, correct?

Glad you have it working. -Rico

@hugoeyng my suggestion a quick n dirty one A) use in openVPN [image: 1586412061734-d60e993d-cbed-4236-83d2-ed5bc436c142-grafik.png] B) follow this post to assign static IPs for your vpn-clients noPlans qNd answer in post on this formum (https://forum.netgate.com/topic/152171/openvpn-and-static-ip-for-all-clients/8) C) put these assigned IP adresses into an alias D) create a firewall rule with this new alias E) use the information from the documetation in this post to schedule the rule link here --> https://docs.netgate.com/pfsense/en/latest/firewall/firewall-rule-schedules.html i will test it today, and keep u posted, if anyone got a better idea lets share and improve nP

@mururoa said in Access servers on lan: But I wonder how this pretty common situation is not already documented ?? This is not common : @mururoa said in Access servers on lan: the pfSense box is not the gateway of that lan. Common is : pfSense is the router/firewall/OpenVPN server of the LAN(s).

@noplan said in OpenVPN with 2 clients results in disconnect for both: [image: 1585674945333-b2940529-119b-459d-b1f8-00194735d382-grafik.png] blank is 1 connection set it to n+1 eg --> 2 users results in 3 safed me some troubels what I found out quickly that only my Windows clients gets disconnected while the Android client still works. very strange. Maybe I need to reinstall my Windows OpenVPN client. But I currently don't have access to this machine.

@viragomann Thank you very much. What do you think about IPv6? Is also NAT best practice?

Hi guys, I talkied with the ISP of this users and they confirm that the configuration changed and they are having this type of problems, we have to wait for them to fix it, thanks a lot for your help.

Huh? Yes you would need to assign IPs to your different vpn clients. You can either do multiple rules or use an alias to have multiple IPs in your rules..

@Rico thank you very much for a swift and supportive reply. I was concerned than there were hidden issues or something. more complex question, do vlan ID's transit the VPN?

Anybody? I have seen quite a few posts on reddit regarding this issue with no resolution.

I don't know why but it seems all I had to do was switch it off and on again, everything now seems accessible. Thanks for looking viragomann.

@mleone87 said in List connected OpenVPN Users like Status / Openvpn from a shell script: Status / Open page You mean the Status / OpenVPN ? Or the OpenVPN widget ? The page Status / OpenVPN - which is a PHP script file, contains the answer. You will find on line 54 : ... $clients = openvpn_get_active_clients(); .... When you check that function, it's here /etc/inc/openvp,n.php, you will see that the GUI (php) is questioning the openvpn process by connecting to it's socket, and sending command a get a list with all the details. Check for yourself : Find the socket name of your OpenVPN server instance, it's here /var/etc/openvpn/. There will be a one or more files called serverx.sock where x is the OpenVPN server instance. Now, presume you have only one instance, so x is "1" telnet -u /var/etc/openvpn/server1.sock and type the command state On each line you have the details of a connected user. Pipe this rsult through a "wc -l" command to get the number of lines = number of connected users. Type quit to exit the connection. Use the OpenVPN manual to know how to talk to the OpenVPN process. Up to you to script it all out. You can use the Status / OpenVPN php file and OpenVPN widget php file as a guide line.

@Rico thanks mate! will try this.