@ILIKENETGATE said in VPN Question:

@viragomann OK armed with all this information I couldn't wait until the weekend and got it done today. It works but really slows down the internet to about 30-40 MPS from my 150MPS. I guess I'll use the VPN service when I need it by turning it off under the services section. I did tun on the cryptographic engine in the settings since my 3100 has it but I didn't see much of a speed change. BTW for those reading the Vypr VPN customer link in the beginning of this, ignore pasting in the items listed in the advance section. When this was in place I could not connect to the VPN provider. When I removed it I could make the connection.

right. i have to remove several options as well.

check your send and receiver buffer. i usually use 256k

Its a very common issue.. Users don't normally think about it until they run into ;)

And definitely check the date. If it is not current, they are probably wrong as things exist today.

There should be no Custom Options necessary to get almost all configurations working. It should all be able to be handled using the server and Client-Specific Overrides in the pfSense GUI.

You might be able to tweak some additional throughput out of it or overcome PMTU problems etc with custom options, but basic functionality should be obtainable without them.

@Rico
Figured it out. Had to call up ISP for port forwarding.

Thanks for your help

If you are intending to bridge the clients into those separate networks, then it will require one server per network.

If you are only looking to limit traffic, that could be accomplished with some work with overrides, rules, and so on, but it's still best to use separate servers (each with its own different CA structure) for complete isolation.

I've tried to set up firewall optimization options to conservative to keep idle connections open in hopes it would help, but it doesn't

@stephenw10 The gateway is set under the LAN adapter IPV4 Settings along with static IP on the Panel PC itself. There is no router between the Panel PC and PLC, PLC is connected directly to the Panel PC. Could having no router be the issue? Is there a way to forward traffic with Windows?

Me neither ;)
But a firewall does what you want - you are the boss ^^
Idea : make your rules verbose and have a look at the firewall logs.

Non working dns doesn't stop a ping via IP, but stuff doesn't work if your trying to use fqdn to ping ;)

macOS spotlight and never deleting anything for the win. :)

@Rico said in openvpn ios connect allowing local lan while connected to vpn:

You have full access control with Firewall Rules in the OpenVPN tab.

-Rico

I am referring to access LAN of the network being used to access the VPN (not mine this would be the network in connwecting to the vpn from)

whats im missing?

The wizard only fully supports IPv4. There is a selection in the protocol for IPv6 but only because that box mirrors what is available in the server configuration page.

Though you can easily add IPv6 to an existing VPN by setting appropriate IPv6 tunnel networks, routes, and firewall rules.