It is. I would start by going back to your VPN provider and looking at their tutorials. Most providers these days have them and there's usually a generic openvpn one disguised as other / ddwrt / openwrt etc. Some providers even have a pfsense specific tutorial. I recommend this because they also usually supply the correct parameters specific to them, or even ovpn files you can use as reference in pfsense. There is an additional parameters section in the pfsense openvpn client config which override any of the specific settings entered prior. You will be able to paste most of your ovpn stuff in the additional parameters which will be user and perhaps have to give some fake values in the non advanced section to satisfy the UI validation. This is the one thing I'd like to see in pfsense: the ability to define a client by linking / uploading an ovpn file from the UI. If you know how to use the advanced parameters, you can actually link to one in there assuming you know how to copy it into the install. The one thing I don't recall is if all traffic in the firewall automatically flows through this client because my configuration is to VPN on a per host basis.

Thank you very much for the solution! I made an alias for localdomain so it makes things easier and cleaner in the rules. Thanks again!

Any resolution to this you found?  I may be having a similar issue.

me think… you get the same 192.168.X net at your inlaws as you have at home... " in vpn route all traffic" does not mean you dissapear from local LAN ( you still reach LOCAL LAN so you.. "get stuck in there" with your traffic.. you never Leave their LAN to reach yours... because of  the use of same NET numbers ) my suggestion is that you at YOUR home use a 192.168.X net which is not common as a default net .. common deafult net in home routers: 192.168.0.0/24 192.168.1.0/24 use 192.168.100.0/24 at your home instaed rgrds Johan

all setting was right ,  i havn't mentioned that one of the pfsense version is , 2.0.2  :-\  :( i'll install the new 2.3.3 version this week and try again ,  thank you for help any way ^^

"simple modem BT business hub." Pretty sure thats some marketing words and not referring to a "network hub". its probably a router provided by an ISP such as british telecom. Just a guess.

what a helpful forum… well -- the answer is to add a static route to the 10.10.222.1 router to route to the VPN network via the .10.10.222.250 interface.

That completly solve the problem, hope openvpn configuration can have a checkbox to enable this option in the future, and hope information in this topic can help anyone else in the same situation after the upgrade. Thanks Jimp!

i have noticed one user has forget his VPN on while he is on the office, he is connecting with the VPN from the LAN, when i disable his connection VPN start working. is there is a way to fix this ? even when the users forget to disconnect their VPN on the LAN won't cause the openVPN server to crash. is this related to the Crypto: AES-128-CBC/SHA1 D-H Params: 1024 bits we are using?

Morning - anyone have any information regarding this? I need to be able to save the mtu size of my openvpn so after a reboot, it doesn't change back to 1500. thanks

import your CA and your cert+key in pfsense. use the .ovpn file to configure a vpn client on pfsense.  after configuring, make sure it connects in the OVPN logs.  You'll need to assign and enable an interface, check the routing, create any rules you need (connecting clients entering your LAN through the VPN tunnel to other subnets inside your LAN).

@Ip: By "their" I suppose you are referring to the subnets … I'm refering to  Services > DNS Resolver  and  Services > DNS Forwarder You have to pick the interfaces they serve.

@haarweg: @jimp: https://forum.pfsense.org/index.php?board=69.0 ah, board more in a forum sense than in a hardware sense :). thank you. Were you able to test with a recent build of 2.4?  Looking for updated numbers on the apu2c4 if available. Looks like current OpenVPN throughput is ~ 71mbps from your tests using iperf which gives a more real-world number than just local raw benchmarks.  Has anyone seen higher on this hardware?

That's a very clear error message. Fix your network policy on the Windows server. It's a problem there, not a problem with pfSense.