Thanks for you respone. Pfsense1 is the server site and pfsense2 is the client.
this is the configuration for both sites.

Client site                                                Server site
Protocol        TCP                                      Protocol        TCP     
Srever Add    10.189.137.1                          Dynamic IP      enabled
Server port    1194                                    Address pool    192.168.10.0/24
Interface IP  192.168.2.0/24                        Remote IP      192.168.2.0/24         
Remote network 192.168.1.0/24                   
Proxy port    3128

I already created rule that allow all traffic from WAN to LAN.
Thanks

Nothing great stuff…. it is just to help me in doing my routine and to help my team in easy handling of things.... I do not want them to tamper with something which they do not know.... So, some child stuff.... For this to be shared, I need to go a long way..... I am just crawling....

Btw, It was my mistake in fetching the certificate from Database..... Changed the logic of fetching the certificate.... now it is thorugh and it accepts the certificate without any problems. Still continuing to use the same uuencode -m option.

This is fixed in recent snapshots.

Didn't help in the build I had.  I moved to the latest snap and it's fixed now.

Weird!

And thank you and sh_man very much for your help and time…

Hotel to get your LAN subnet to VPN clients you need to use bridging and that will only work in TAP mode with the TLS server.
So all that might be wrong is just a route that i am missing.
I will look into that next time I get a chance.
Thanks again

Yay!  Thanks for reporting back.

he has info on how to setup a vpn with the windows xp client
now he wants to replace windows xp with pfsense if i read him corect

pfsense can't make a conection to a ptpp vpn server it can be one it self but can't connect to a other one

Make your pool something like 10.8.0.0/24 don't use a 1 at the end like in your previous post. You want a 0

the usermanager of the captiv portal is storing it usernames and ww in the config.xml file

Thanks - I'll see how I get on with that.

Guess not. :(

I went awol there for a while, so I know for fact that I'm not. :P

You are probably wanting something like http://sourceforge.net/projects/sslexplorer/

I solved it by making a NAT-rule from OPT2 interface to the same with another port, and all packages goes back the same way. Ugly hack but it works.

Couldnt get the policybased routing to work with Openvpn, works great with everything else.

Anyone know anything about doing this with the embedded version?  I'm gonna give this a try because I would like another point of security before going production with my openvpn setup.

I have same problems only I apply firewall filter to stop blocking tun1

Very many thanks, Daniel.

I think EVERYTHING you've said is right "on-the-button" - including your speculation that the NetBios packets don't get through.

The IP-address is acceptable for these tests. In the proposed "live" site, WINS, etc, is running, so the overall setup should be a little nicer.

Thank you again,
  - Mike

@daniell:

Hi,

you can push your WINS-Servers IP to the Roadwarrior using the DHCP-Options. These Options can be configured in the pfsense GUI /VPN/OpenVPN/OpenVPN: Server (Edit your OpenVPN-Server config)/custom options. We use:

push "dhcp-option DNS xxx.xxx.xxx.xxx"; push "dhcp-option WINS xxx.xxx.xxx.xxx";

The first option is for pushing the DNS-Servers IP, the second Option is for pushing the WINS-Servers IP to the client. Exchange xxx.xxx.xxx.xxx with the IP-Address of your DNS- or WINS-Server. You may push other DHCP-Options as well. Seperate the options with ;

Hopefully this will improve network browsing for you.

Regards,
Daniel

Hi, Thanks for that.  I put in the various settings and was able to pick up the WINS server through my OpenVPN connection. (see below), but for some reason, the neighborhood of computers still does not appear (only the client machine).  I'm a bit puzzled by this.  Would the fact that OpenVPN requires that you assign a separate subnet to your LAN be part of the problem?  As far as I know, this should work unless I need a rule for some sort of broadcast stuff…

Anyhow, it's not a big deal because I can still access network shares through OpenVPN.  I just need to know the name of the computer that I want.

Ethernet adapter OpenVPN:

Connection-specific DNS Suffix  . :
        Description . . . . . . . . . . . : TAP-Win32 Adapter V8
        Physical Address. . . . . . . . . : 00-FF-3B-2B-69-CB
        Dhcp Enabled. . . . . . . . . . . : Yes
        Autoconfiguration Enabled . . . . : Yes
        IP Address. . . . . . . . . . . . : 192.168.16.6
        Subnet Mask . . . . . . . . . . . : 255.255.255.252
        Default Gateway . . . . . . . . . :
        DHCP Server . . . . . . . . . . . : 192.168.16.5
        DNS Servers . . . . . . . . . . . : 192.168.67.1
        Primary WINS Server . . . . . . . : 192.168.67.5
        Lease Obtained. . . . . . . . . . : 19 February 2007 20:14:23
        Lease Expires . . . . . . . . . . : 19 February 2008 20:14:23