@bcruze Haven't restarted. What do the openvpn logs say?

@spinx I guess you need to reconfigure the client for no compression.

Sounds like you are using the wrong kind of setup. The addresses you list are from a net30 topology style server setup with one server and many clients. If this is the only client, you don't need a setup like that, just a plain peer to peer setup without the extra server parts.

@jairoav25 Yes in the past I tried to get DNS from them. Their advice was also to use Google or Cloudflare because officially they don't support pfSense. In since have moved away from ExpressVPN. There are beter options out there. Thank you for trying and sharing your experience!

@me-yro So you want to use a VPN service to access the internet. For now I cannot see that there is any of these subnets is defined on your pfSense interfaces. @me-yro said in openvpn connection initailised but no connection go throw it.: however, when i made the correct configuration for the subnets nothing work ( no internet connection ) Since you don't show it there is no way to verify. Is your VPN up? In the VPN settings check "Don't pull routes". So you can configure your new subnet and let them go out to WAN first. If all is working add the outbound NAT proper rules to the VPN interfaces and add policy routing rules to direct the traffic out. If there are issues post more details of your settings.

Happened again this morning, exactly between 7:29 am and 7:30 am. I checked the OpenVPN logs. There is absolutely no activity between 7:31:10 and 7:36:40, which is unusual. Typically someone is reconnecting every few minutes. Then, at 7:36:40, all 13 connected users have an inactivity timeout at the exact same time. After that, all remote users start aggressively connecting, every few seconds. By this point, the CPU is already at 100%. Starting at 8:16:59, the log starts throwing errors that no more IP addresses are available.

@divsys Appreciate the heads up. Gonna wait for a fix for all this. Right now I'm getting by as a Wireguard client.

@sensecanuck said in VPN up Gateway up - No Internet: Solved in this thread by disabling Data Encryption Negotiation. https://forum.netgate.com/topic/161040/openvpn-client-showing-100-packetloss-following-2-5-0-upgrade/10 Thank you sir. Just got back to town and this worked. For those who are having this same issue the following two things will fix this issue: Uncheck "Enable Data Encryption Negotiation" or Remove "tls-client" from custom option settings in OpenVPN

@viragomann Yes, I was assuming the ciphers are identical on both sides and they were. But as I figured out "Enable NCP" was activated. After disabling it the connection attempt succeeded. So, everything seems to be ok now. :-) Many thanks for our help!

@jknott ok thank you :-)

@stephenw10 thank you :-)

@hieroglyph thank you :-)

AES-GCM would be the best choice.