The error message "Cannot open TUN/TAP dev dev/tun1:Device busy" points to a previous instance of OpenVPN already running.

This can happen if you're playing with your OpenVPN settings, trying to get things "right" and restarting the OpenVPN client and/or server.
Sometimes the previous instance doesn't exit cleanly and can hang around for a while.

I would try a full reboot of the box to make sure you have a clean start and see what your logs look like.

Forget the PIA website instructions…worthless.

This is what worked for me... very nice tutorial: https://forum.pfsense.org/index.php?topic=76015.0

And, while on the subject, configuring outside servers to return RFC1918 addresses subjects you to dealing with DNS rebinding protections. Ran into this a few times running internet for a hotel meeting space. Told them to slap their network admin in the face hard when they got back and use a hosts file entry. Many of them were even 192.168.0.X - like that will work reliably on random, private networks.

The Airport Extreme makes a fine Access Point and switch if you only need 4 Lan ports. In the Windows Airport utility, Internet tab, you have the Connection Sharing drop down in which you specify Off (Bridge mode). With that set you can also use the Wan port as just another Lan port providing a total of 4 ports.

Now I know  :)

Will try to find why its working for me. That machine as I just discovered, is getting detected through NetBIOS so yes maybe its WINS.

Under Network select View-Details, then right click on the columns (Name-Category-Workgroup-etc.) and select "Discovery Method".
Then you can see how they`re discovered, obviously  :o

I hope thats clear enough because I dont have English version of Windows  :)

Hello,
I have the same problem. When I'm connected to the VPN I can not surf the Internet, but have access to the remote network.

Removed 'ping-restart' and other 'ping-xxx' options from the config and now the vpn client doesnt die.

That was it - changing it to 10.254.254.0/24 worked!

Thank you all!

Moikerz, Pippen, NOYB, I really appreciate you guys replying back.  I've researched some things already that you all have mentioned and I'm going to do my best to dive in and start testing.  Wished I was looking for something simple in the GUI.  Guess not.

I appreciate the sympathy on the matter.  I live in a state with only about 4 million people.  And I live in one of the larger cities if you wanna call it that.  I just refer to it as a big town.  So if we want more bandwidth, we have to cough up a heck of a lot.  The whole supply and demand thing.

Right now I'm looking for a reason to switch out a few of my clients DD-WRT routers with a bigger gun, like pfSense.  Was hoping pfSense alone with little customization would provide a better OpenVPN experience.  Aside from the killer interface in pfSense I'm pretty much in the same place I started with DD-WRT.

Thanks guys!  Hoping I can make pfSense work out for me.  I haven't had this much fun with tech in a long time.  I could play with that GUI for hours on end.  Just wish I had more time.  "Technology, why can't it be easy?"  Guess that's why we get paid the big bucks ;)

Thanks, that's work and it's that i needed.

@toysareforboys:

@BlueKobold:

If encryption comes in the game often lower end or very old hardware is not really so nice
to play with it. Would you tell us oerhaps at first something about your hardware setup?
Board, CPU, RAM, 32Bit or 64Bit, etc…...

Do you know how to disable encryption on OpenVPN?

VPN implies encryption. To lessen the load you can choose AES-128 rather than AES-192 or AES-256, but you cannot disable encryption completely.

i had this "problem" too, until i figured out i need to create users & user certificates before i can use the export function.

Ok, now i understand. Thanks again for this explanation!

That's fine, and that's a typical way to deploy as a VPN appliance.

For traffic leaving pfSense going to the rest of the local network, you will need to apply outbound NAT to mask the source, or add a route for the tunnel network on whatever routing device is used as the default gateway on the local network.

@BlueKobold:

Because something is done in software it must not be really bad or more bad then other things.

Its not really about bad/bad more but more about whats going on under the hood (and my lack of understanding).

Thanks

@johnpoz:

Yeah most likely when your on your vpn your using your vpn for dns..  Which kind of want if you want to resolve your home stuff..  So just create an over ride in your home dns to resolve where that webserver name is to its 172 address and you should be fine.

or just create a host entry on your work machine to resolve what you want to the 172 address.

aww yiss, hosts file entry worked perfect, Thank you!