@viragomann Ok, I understand, I have 2 different users but the same certificate... Thank you very much for your help !

@NogBadTheBad Thank you for the insights. I didnt even know that

Anyone having the same issue who found this via search: I have been able to replicate the issue on several devices now and I was able to stop it from happening by making the server UDP4 only, not multi-home UDP4/UDP6. Seems like a bug to me because the server does have native IPv4 and IPv6 but the only configuration change that made this issue go away was changing the server to UDP4.

No idea about your USG stuff, but you should be able to hit pfSense at 192.168.5.1 with no problem. Show your OpenVPN Config and Firewall Rules. -Rico

Here is the official doc: https://docs.netgate.com/pfsense/en/latest/book/openvpn/bridged-openvpn-connections.html -Rico

@rjamesm said in Help! OpenVPN settings will not connect no matter what I do: I've been struggling for the past couple days to get this to work, seems like a no brainier yet still difficult. Hi, This seems desperate to me ... if we get professional information we might be able to help with the issue

@akuma1x No, the want to bill monthly extra for that. Plus I was thinking if would be safe to mask the IP through Cloudflrare but they don't support any traffic if it's not HTTP/HTTPS.

See image here https://forum.netgate.com/topic/156544/ipv6-over-openvpn?_=1599304505033

thanks for your update. OpenVPN 2.5 will allow to pass a domain search list to Windows clients, see https://github.com/OpenVPN/openvpn/blob/release/2.5/Changes.rst (search "Support setting DHCP search domain") https://community.openvpn.net/openvpn/ticket/1209

Glad you have it working now. -Rico

@Rico Thanks for the link! I don't know why I didn't go there first.

@johnpoz netgear C300. yes when i configured my netgear as a brigde my laptop grabbed an IP public, but when i tried to configure wan interface trough dhcp, it shows as 0.0.0.0.

Glad you have it working now. -Rico

@techsovereignty The remote devices need to use pfSense as default gateway to access them from the VPN client. If there is no option to set a gateway you have to nat the packets to these devices to the pfSense local IP. You're only talking about the router and the switch. I think, there will be other devices, which you're capable to access?

@sceptre357 try to make a packet capture of the RADIUS response and check it for the network mask value

OK, the problem got fixed on the Cyberghost side. This can be closed.

@MrGlasspoole Yes, I guess it is blocked in these networks. You may setup your OpenVPN server to listen on port 443 TCP to avoid blocking. However, TCP has a worse performance than UDP. So you may also run two servers as I do. One is listening on 1194 UDP, the other is listening on 587 TCP, thinking port 587 is mostly allowed, since it is used on some mail servers. Then you can configure your client to connect to the second server if the primary isn't reachable.

@sbuchanan Thank you so much. That was an exceptionally frustrating 2 days I just spent on this. It's almost more upsetting that it was just a single checkbox for an optional feature.

Im using FF 80.0.1 and not seeing this.. Just tested with multiple config for multiple openvpn instances running. The downloaded files are 6kb in size and look normal.. BTW - I snipped out that IP you posted, you prob didn't want that posted.