Thanx Will read through those /Bingo

@JeGr ok noted

You sir are a scholar and a gentleman, works perfectly, for some reason I thought that the .3 and .1 was enough. put in a 165 at the front and it light up like a christmas tree..

@asphalt3 said in OpenVPN multiple instances for Gigabit speeds: i5-2400 Thanks 4 info

Thus is pretty straight forward, where are you stuck at https://support.strongvpn.com/hc/en-us/articles/360038592794-pfSense-OpenVPN-Setup-Tutorial

@Trey I think you're making things too complex here. Start simple, that's UDP over IPv4. See if that works as needed. Then change to IPv4 and IPv6 UDP. Don't use TCP, unless you have a need for it, as running VPNs over TCP is not a good idea. There should be no need to use NAT on IPv6.

Glad you have it working now. -Rico

You can just create one Alias per target server and add the allowed OpenVPN User IP there. Then create one Firewall Rule per Alias in the OpenVPN tab. This can be done with only one OpenVPN RAS. In this example User1, User2 and User3 can access DNS on Server DC1, only User2 can RDP connect the Terminal Server. [image: 1577979536846-1.png] [image: 1577979551282-2.png] [image: 1577980362776-3.png] -Rico

@mustafa86m Assuming you have pfSense connected directly to your ISP, you don't need port forwarding. However, if the modem is in gateway mode, so that you get a NAT address, then you would need to port forward. However, in that situation, I'd recommend putting the modem in bridge mode.

sorry for the post, got it working. It was just a simple typo.

@TriStarGod what did u adjust

@Druplex said in OpenVPN unable to contact daemon pfsense 2.4.4_3: What would be the issue? The OpenVPN setup, the file with parameters that makes de service == daemon run correctly, contains errors. In this case, it's the place where you setup the OpenVPN settings. So the daemon (== service) starts, and fails to work correctly, so it stops. The GUI, let's say 'pfSense', can't contact the daemon, so it tells you what happens. Btw : to have the OpenVPN server logs telling you what's right and what's wrong, think about putting the "Verbosity level" to 3 or 4. Then go here : [image: 1577723705466-9f1f9c6e-1512-44d7-a1d8-b844f75561a4-image.png]

Fixed my problem Thanks! I made some security update's today to my vpn, as it has been ruining the same way for 3 or 4 years. After the OpenVpn app stooped working after I update it! I uninstall the app, the vpn certs, setting, vpn & package. I spent all day tiring different setting, Watching YouTube video's to steal other's setting! It was this simple Use a different app. My brain hurts after today. All the googling I did with that stupid error, Stupid android app. The Error I had was, Failed to parse profile: crypto_alg AES-256-CFB1: not found. It did not matter what Crypto I used I tried many. @jimp THANKS DUDE!.!

@JKnott It is unusual, but it's the standard Comcast setup when you have a business account with static public IPs. For residential, or lower-tier business accounts, you get a dynamic public IP. I'm talking about v4, but they are now providing a static v6 block with the v4, and a residential user gets a dynamic /60.

@sianand said in Need OpenVPN on a pfSense behind NAT Router: pfSense isn't doing NAT That's probably a dont care. The destination isn't NATted by pfSense, because the end destination is pfSense itself. A [image: 1577369297741-870c2b81-2e35-48c9-80d1-0d07f9b12c35-image.png] on your WAN interface will do (if you use UDP on port 1193 - this rule will be created by the OpenVPN wizard if you used that wizard). The upstream router - if any - has to have a 'real' NAT rule of course.