all setting was right ,  i havn't mentioned that one of the pfsense version is , 2.0.2  :-\  :( i'll install the new 2.3.3 version this week and try again ,  thank you for help any way ^^

"simple modem BT business hub." Pretty sure thats some marketing words and not referring to a "network hub". its probably a router provided by an ISP such as british telecom. Just a guess.

what a helpful forum… well -- the answer is to add a static route to the 10.10.222.1 router to route to the VPN network via the .10.10.222.250 interface.

That completly solve the problem, hope openvpn configuration can have a checkbox to enable this option in the future, and hope information in this topic can help anyone else in the same situation after the upgrade. Thanks Jimp!

i have noticed one user has forget his VPN on while he is on the office, he is connecting with the VPN from the LAN, when i disable his connection VPN start working. is there is a way to fix this ? even when the users forget to disconnect their VPN on the LAN won't cause the openVPN server to crash. is this related to the Crypto: AES-128-CBC/SHA1 D-H Params: 1024 bits we are using?

Morning - anyone have any information regarding this? I need to be able to save the mtu size of my openvpn so after a reboot, it doesn't change back to 1500. thanks

import your CA and your cert+key in pfsense. use the .ovpn file to configure a vpn client on pfsense.  after configuring, make sure it connects in the OVPN logs.  You'll need to assign and enable an interface, check the routing, create any rules you need (connecting clients entering your LAN through the VPN tunnel to other subnets inside your LAN).

@Ip: By "their" I suppose you are referring to the subnets … I'm refering to  Services > DNS Resolver  and  Services > DNS Forwarder You have to pick the interfaces they serve.

@haarweg: @jimp: https://forum.pfsense.org/index.php?board=69.0 ah, board more in a forum sense than in a hardware sense :). thank you. Were you able to test with a recent build of 2.4?  Looking for updated numbers on the apu2c4 if available. Looks like current OpenVPN throughput is ~ 71mbps from your tests using iperf which gives a more real-world number than just local raw benchmarks.  Has anyone seen higher on this hardware?

That's a very clear error message. Fix your network policy on the Windows server. It's a problem there, not a problem with pfSense.

I do not agree that ExpressVPN is an absolutely awesome service. I've been surprised when found it as one of the top rated VPNs. As for me, ExpressVPN is nothing more than a well-thought-out business plan for boosting their rating. I’ve tried to use it, but it did not impress me. There are many other services that provide multiple features and even discounts for their users. The site https://www.bestvpnrating.com helpes me to be informed.

@bienicc: LinxS, Just make sure you put IP subnet of both sites into "IPv4 Remote network" fields (on both site), that I think you are done already. What you need is to pay attention to firewall rule at both sites, whether it allow to ping each other or not. That resolved my issue, (after making sure I restarted my VPN service), Thank you for your help  :D Next I am going to implement SSL/TLS as it is more secure than shared key  :)

Thank you!

There should be an option for "inter-client communication" you can select in the server preferences.