Let the user get the latest OpenVPN version: https://community.openvpn.net/openvpn/wiki/OpenvpnSoftwareRepos

@leonardo-fernandes You are my hero. Thank you very much. My OpenVPN with AWS works perfectly now

@viragomann That works as expected! Thanks a lot! Now I have another problem -> new thread.

It's a UDP tunnel fyi, not TCP

@johnpoz Wow...I was staring right at it. Regardless, thanks for the fast reply...will simplify the needed editing. Thanks again!

Try to post log as a text file. sanitized-log.txt

Found it. Either this thread can be deleted or we can see if others would see the error. Hint: I would have had assumed that with this error, nothing would have had worked, but instead it did - even with mediocre speed ;-)

No idea what directory you are talking about, can you specify the question? -Rico

@webstaff Google foo.. Just pop this in Server custom options. push "route 0.0.0.0 0.0.0.0" https://forums.openvpn.net/viewtopic.php?t=27321 Seems to do the job.. If anyone wants to give me some Karma so I can post without getting hit as a spammer that would be great. Regards Dave

@meaglerick I think, that is the wrong place to ask this. Possibly you have luck in the OpenVPN community forum. We are just following here the guides provided by Netgate: https://docs.netgate.com/pfsense/en/latest/recipes/openvpn-s2s-psk.html https://docs.netgate.com/pfsense/en/latest/recipes/openvpn-s2s-tls.html

Solved : I change the IPV4 Tunnel Network CIDR to 172.16.40.0/24 and everything is working again.

@viragomann Okay the Firewall logs only include people sniffing at some Ports. Idk The pfSenseA is the default gateway on the server. The Gateway of pfSenseA is WAN, and the tunnel is established over WAN. (there is another router in front of the pfSenseA could this lead to problems? I thought the packets are routet through the established site to site connection)

@dabbelju007 said in Adding OpenVPN Interface in Interface Assignments: Traffic from my OpenVPN network is hitting the "OpenVPNOPT" interface, not as I would expect the OPENVPN. Without knowing your firewall rules I cannot estimate. However, it behaves like stated in the link. The OpenVPN is an interface group is mentioned. For testing you can add a block any protocol, source, destionation rule to the top of the OpenVPN tab. Consider to flush the states on that interface before trying to access something.

Just tried making heads or tails of out that thread.. Makes zero sense to me.. If you you need a downstream router (doing vpn or not) - then connect it to pfsense via a transit network.. Has zero to do with trying to create a vpn interface on a vpn client connection.

It's not a bug. Option 1: Update your clients to OpenVPN 2.5.x Option 2: Check the legacy box before exporting

@beui You can do the by a policy routing rule. You have to assign an interface to the OpenVPN instance at A if you didn't that already. Add all your internal destinations or networks the TV need to access or as well possible all RFC 1918 networks to an alias. Then add a pass rule to the interface the TV is connected to, at destination check "invert" and enter the alias, expand the advanced options and go to gateway and select the openVPN gateway from the drop-town. Put this rule to the top of the rule set so that it is applied before checking the others for local traffic.

Unbound ACL's ? Ohh a bit to late ...