@viragomann got it and now my issue is resolved thanks.

I can push routes and other config parameters via the server, frustrating that this isn't one of them;/ My remote user base is about 40, if I had 100's I'd be very unpopular.

@johnpoz Yeah, I noticed. Originally I didn't save it directly on the forum because of the 2MB limit. But I tell you, I fixed it on the server adding a white background and flattening the PNG. Maybe you weren't getting it because Cloudflare caches things requested frequently--or maybe the browser, Chromium-based browsers in my case are always seem to be ignoring stuff, for instance: I cannot log in with smart cards to vCenter because it wouldn't kill the session while other browsers do. It would've eventually updated itself. I was already getting it with the white background. Thanks anyway, I won't post transparencies again, lesson learned.

Got it sorted out. As I thought it was a simple fix to a major headache, in the client config all that is needed is to add the "Float" line to the end of the configuration. Now it shows as routing traffic through the server and no more errors in the status log.

No access to pfS at the moment but on client side add float to the config. Could be a checkbox too in CSO. See --float in manual 2.4: https://community.openvpn.net/openvpn/wiki/Openvpn24ManPage

Add a REJECT Rule on your LAN Interface with Destination "This Firewall" and your OpenVPN Port. Place the Rule on top of your LAN - allow any Rule. -Rico

@viragomann said in Access LAN via OpenVPN Server and pfSense OpenVPN Client: So I assume, pfSense is the default gateway on the LAB network. Yes right, all network traffic of the LAB pass throught the pfSense. Thanks very much for the answer @viragomann !! I'll try all that asap and tell you if it worked or if I've other questions !

You have to forward OpenVPN packets on your ISP router to the pfSense WAN IP. The pfSenes WAN address should be static. Configuring an OpenVPN Remote Access Server If your public IP from your ISP isn't static, you will have to use a dynamic DNS service to have a static FQDN, which you are able to connect to from outside. The DDNS update should be done by the ISP router if possible. If it doesn't support that you may do it on pfSense, you can run a cron job with a short interval for that.

@Derelict said in OpenVPN Site to Site with 3 locations: Sort of. They would need to each be on the proper server going to that site. I did misspeak that... The A-B link would be "remote networks" 192.168.2.0/24 on the A side and The A-C link would be "remote networks" 192.168.5.0/24 on the A side. But since I apparently need new glasses I missed the part where the OP said he had those links working... DOH!

@jeff3820 said in Optimize OpenVPN connection: set to BSD Cryptodev engine. In the Pfsense Advanced/Misc settings the cryptographic hardware is set to AES-NI and BSD Crypto Device Disable both. Try playing with different values for snd/rcvbuf. Also, can play with --txqueuelen n See manual 2.4: https://community.openvpn.net/openvpn/wiki/Openvpn24ManPage Above settings apply to server and client separately.

So you may already have assigned interfaces to the OpenVPN instances on both sides. Deactivate all firewall rules on the OpenVPN tabs if you don't need them for other purposes and add rules to your VPN interfaces with limited access. Remember that the OpenVPN tab is handled as an interface group including all OpenVPN instances running on pfSense. For the IP range 172.16.0.200 - 172.16.0.210 in your example you can add an alias and use this in the filter rule as source.

@Gertjan said in Streaming through the VPN: @william333 : is this a publicity ? What I read is this : b#ll#t#vn isn't on the "Netflix" VPN list .... yet . It will be there in the near future. Check the b#ll#tv#n URL : no where it's mentioned that "Netflix" passes, or, that would be a huge commercial selling reason ..... "24/7 live chat customer support" won't be of any help with these kind of issues. See i browse and i found that site which i mentioned here. Regarding your above sentence "24/7..." then i removed that sentence.

@jagradang Thanks, your solution worked fine.

Just logging issues here; another thing that this DNS issue causes is that NFL.com Fantasy Football Game Center does not work.

No idea about Astrill, but maybe this one helps: https://www.netgate.com/resources/videos/openvpn-as-a-wan-on-pfsense.html -Rico

@hamed_forum use 0.0.0.0 in IPv4 Remote network(s) fowrard all trafic to server side

Hi is there anyone who has already setup site to site OpenVPN who can help me?

I am going to try this out in the next week... I'll post results if it works. First read-thru passes the sniff test. Fingers crossed https://blog.monstermuffin.org/tunneling-specific-traffic-over-a-vpn-with-pfsense/