Hi,

the LAN rule did the trick!

Many thanks.

oh i see… i missed that one.  :-[
thanks for your info.

yes.

http://openvpn.net/howto.html#revoke

On pfsense there is below the fields to set the server key and certificate a field to put your CRL in.
No need to mess around with copying files manually and modify the config files.
Just use the field which is already in the GUI.

Got it.  LZ0 compression is on in the config file supplied with the how-to in the wiki, but i did not have it turn on @ the pfsense.  Removed the LZ0 line from the client config, and everything seems ok.

I want to have a LAN Party with remote locations.  I would like to avoid lag (unless the lag only hits them and I can win easier!)  ;D.  We tried to use the Sony servers and could not get on…I guess they are selling a ton of playstations.

@noitalever:

I have on the client side: (which is the 192.168.250.1 Lan)

Protocol  TCP
Server address :70.xxx.xxx.xxx
Server port :1193
Interface IP  192.168.10.0/24
Remote network  192.168.252.0/24

and on the server side,

Protocol  TCP
Dynamic IP  is checked
Local port  1193
Address pool: 192.168.10.0/24
Use static IPs  not checked
Local network  blanked,
Remote network  192.168.250.0/24

I think that this could help, you should set a rule a for a push route so the client side know what is what on the server side? (email servers Domain controllers?)

push "dhcp-option DNS x.x.x.x";push "dhcp-option WINS x.x.x.x"

that was the old school way now they have a fill in the boxes with your needed servers ip

also shouldn't you fill in the local network in the upperbox?

Ok,

I will give it a try on monday, and check if the routing table changes after I fail WAN1 and my clients reconnect through WAN2.

I'll post my findings here,

Thanks a lot!

Regards,

Diego Bendlin

ooookee…..
Without any information (and you provided next to nothing in your last post) i wont be able to help you.

But as a prelimary nogo: using different subnets on the same tunnel is bad.

I have a problem with: "reading before posting"

I read the Pfsense and OpenVPN for new users tutorial and managed to configure it.

The thing is that i was trying to make road warrior work as site-to-site.

I will keep in mind "search before ask" in the future.

Thanks GruensFroeschli for your time anyway

Hi Gruens,

Thanks for  your inputs. Here is what I'm planning to setup, install Pfsense as firewall in all of the sites and configure the OpenVPN client/server setup. The subnet is a trusted subnet, and the scenario would be e.g., clients on site 1 will able to see/share files on the Head Office subnet and vice versa.

LAN subnet
    |
    |
pfsense HeadOffice
OpenVPN server
    |
    |
pfsense remote site 1
    |
    |
Remote LAN

Regards,

Jan

many thanks :)

Humm, today I gave up and installed IPCOP. OpenVPN works fine on IPCOP and has been solid so far, any ideas on what could be causing this with pfsense?

It is obviously not hardware.

Thanks
Keith

Yes you can do it i have it set and running right now i *think

set up a test and let it rip

The WARNING: 'ifconfig' **** "statement means that you have not setup the client in openvpn properly,

going off the information you have provided the client machine must have

interface Ip = 192.168.252.0/24 and remote network = 192.168.1.0/24

Just for the record. My problem had to do with routing. And I can confirm that the server-side pool addresses are the same as the remote LAN. What I dont understand is how I got everything to work following that documentation if it is fundamentally wrong in that aspect.

Thanks again,

Pedro

OK, I understand now. Thanks for your help I appreciate it ;D