OpenVPN

• O

  OpenVPN Server: No internet?
  • oguruma  

  3
  0
  Votes
  3
  Posts
  34
  Views

  Z

  if you have Automatic outbound NAT or Hybrid ,the NAT rule will be created automatically if it is manual you need to create it.
• M

  Accessing IPsec an OpenVPN client
  • mafpbiaggi  

  3
  0
  Votes
  3
  Posts
  20
  Views

  

  @mafpbiaggi Given that VPN type is irrelevant, you have a routing or filter issue. Once a VPN is up, it's no different than any other IP connection.
• G

  Multi-WAN OpenVPN Site-to-site LANs with manual gateway routing
  • Gektor  

  4
  0
  Votes
  4
  Posts
  37
  Views

  

  @Gektor Link to video?
• D

  Remote client unable to connect to one server.
  • DataDaddy  

  1
  0
  Votes
  1
  Posts
  25
  Views

  No one has replied

• N

  Multiple IPs for DNS Server
  • nirmalts  

  2
  0
  Votes
  2
  Posts
  35
  Views

  

  i have some google home stuff with embedded 8.8.8.8 on it, I only use NAT, Port Forward to redirect all query to my dns server
• D

  Routing and OpenVPN
  • DrJon  

  12
  0
  Votes
  12
  Posts
  122
  Views

  D

  @viragomann thanks, will do.
• T

  LDAPS authentication issue with Active Directory
  • TheIlleist  

  6
  0
  Votes
  6
  Posts
  2861
  Views

  Y

  @Leva Hi. Any ideas on this issue? I have the same error 48.
• N

  Difference in DNS Leak Test Results
  • nirmalts  

  1
  0
  Votes
  1
  Posts
  28
  Views

  No one has replied

• F

  OpenVPN DNS and LAN Not Working
  pfsense openvpn problem • • fabiolanza  

  8
  0
  Votes
  8
  Posts
  79
  Views

  D

  Hi, Because of the differences, is it still a question for me which pfSense version is this? (for example, it's a difference...) The second important thing is server mode (you use TLS), but that's all I see: instead of: I don't see your own cert for the connection either: instead of: like: and even a VPN User is required: with: exactly where does the DNS (10.0.1.31) point?? this is the box itself or a separate DNS server on the network
• M

  server.cert file gets corrupted every time I start openvpn service?
  openvpn server.cert corrupt • • michael-newsrx-com  

  3
  0
  Votes
  3
  Posts
  30
  Views

  

  Hi, View /etc/inc/openvpn.inc. Locate the several function calls and definition at the bottom of the function called : openvpn_add_keyfile This function takes the directory, the extension, the PEM based64 encoded data and writes out the file. File rights are set to 0600 and that's it. It's line 760 in the openvpn.inc file. If something goes wrong at that place, I guess the $data that gets base64 decodes isn't 'ok' ? Is your cert ok ? Many cert type files are created using that function. When only "server1.cert" goes wrong, I gues it's input (= $data) is 'wrong'. An old 2.4.4-p3 bug that got resolved (?) ^^ edit : non. openvpn server was working just for for my when I was using 2.4.4-p3.
• W

  OpenVPN Export for iOS should use .ovpn12 for certs and private key
  • whorfin  

  6
  0
  Votes
  6
  Posts
  167
  Views

  

  The OpenVPN connect app for iOS doesn't even support a bundle with multiple files like described for Viscosity to import automatically. You'd have to manually import the .p12 file into iOS separately from the VPN configuration in multiple steps as described on that link. We export the inline configuration because that's what the app accepts to import in one step. If it's insecure, the App shouldn't allow it or should offer to split it and import the keys securely. That's an App problem, not an export problem. We're helping you get the config into the App, that's all. If you don't want to do it that way, don't do it that way, but lobby Apple to change their practices and the App designer to support more secure practices. We could make an iOS "Bundle" but then the user would need to unzip it and copy all the files manually and do all the import steps individually to import the keys and the config. Seems like a lot of work for everyone (us, the users, etc) when the OS and App should be doing it better.
• M

  Can't save a new openvpn server with 2.4.5-RELEASE
  • mooncaptain  

  6
  0
  Votes
  6
  Posts
  91
  Views

  M

  I uninstalled the OVPN client export package and rebooted and I was able to delete the CA and the Cert and add them in again. Also I used blanks in description so all that is OK. Once I get the configuration underway and get to the point I need the Client Export package I'll see if I can add another Server configuration. If there's a problem I'll report back.
• G

  OpenVPN question
  • Guazo  

  3
  0
  Votes
  3
  Posts
  36
  Views

  No one has replied

• E

  Removing openvpn completely
  • EdAdders  

  7
  0
  Votes
  7
  Posts
  92
  Views

  D

  @EdAdders said in Removing openvpn completely: this is still a problem: "UNSPEC" May 18 18:28:35 openvpn 18494 UDPv4 link remote: [AF_UNSPEC] if you still need help, we'll be here after a week too
• V

  Openvpn push route
  • VincenzoDG  

  1
  0
  Votes
  1
  Posts
  20
  Views

  No one has replied

• D

  How to debug dropping OpenVPN connections
  • discy  

  13
  0
  Votes
  13
  Posts
  72
  Views

  D

  There are some spikes once in a while. I was unable to find the root cause. You might be right in that it's caused by the provider itself. To midigate I put the packet loss monitoring threshold at 50/90 and disabled latency monitoring. If there is anything more to do/investigate, I'd be interested to know.
• F

  OpenVPN Network/NAT - redundancy/routing
  • fireix  

  2
  0
  Votes
  2
  Posts
  40
  Views

  V

  Run the OpenVPN servers on pfSense and run pfSense in HA if you need redundancy.
• 

  OpenVPN through Cradlepoint
  • chpalmer  

  1
  0
  Votes
  1
  Posts
  15
  Views

  No one has replied

• J

  OpenVPN Interface/Rule question
  • jeff3820  

  5
  0
  Votes
  5
  Posts
  40
  Views

  J

  Just tried it again...as soon as I change IP address range of OpenVPN server tunnel network from 192.168.75.0/24 to 192.168.120.0/24 all clients lose internet access. I change all rules from 75 to 120 as well as well as the one client specific override. Bizarre.
• E

  Change from static IP to dynamic
  • EdAdders  

  3
  0
  Votes
  3
  Posts
  23
  Views

  E

  @viragomann Thanks, somehow thought it would be more complex. I see the entry and will give it a go.
• V

  please help with openvpn
  • vnkvnk  

  13
  0
  Votes
  13
  Posts
  123
  Views

  

  @vnkvnk said in please help with openvpn: Even more info Using the pfSense - GUI access : does "100" reply to ping ? From "167" : "100" replies to ping ? Or better, can you see and your network resources exposed by "100" on "167" ? @vnkvnk said in please help with openvpn: changed manually IP to 1.168 When doing so - chanting the IP, check / set also the gateway IP, idem for the DNS IP, you can find these on the other tabs.. The last two should be the IP of pfSense.
• M

  Bulk create OpenVPN client
  • mobydick426  

  2
  0
  Votes
  2
  Posts
  24
  Views

  

  No ... and yes. Using the GUI : no solution but click click click. Not using the GUI : You are the limiting factor of possibilities. First : Create one or two users manually. Do a config export, Diagnostics > Backup & Restore >Backup & Restore Consider exporting OpenVPN (server users) only. Yo wind up having an xml file with the correct format. Now, you can script as much as you want. You only have to respect the XML format. Import the file. Check for results. edit : if you are using certs as an identification, things will get a little bit more complicated, but the principal stays the same.
• 

  OpenVPN Gateway
  • Gil  

  8
  0
  Votes
  8
  Posts
  104
  Views

  

  Shouldn't the Gateway at least reply when you "monitor ip" for the OVPN Servers' tunnel address?
• D

  Connection freeze in Site-to-site link
  • DrydenK  

  6
  0
  Votes
  6
  Posts
  52
  Views

  D

  For reasons I had to kill and reinstall the server and the problem is back. If I connect from an external address, pf does not set the connection as 'Established' and kills it after ~30 seconds. Also weird: If I disable pf completely (pfctl -d), the connections is established and remains stable, so it's definitively pf that`s killing my connections. But since I can't leave the server with pf disabled, that's not an option. I've tried a few other tricks, like disabling TX Checksum Offload (https://xcp-ng.org/docs/guides.html#pfsense-vm), settings in the firewall, but couldn't find anything. Has any one else seen something like this?
• K

  How to make multicast work within the OpenVPN tunnel network?
  • kevindd992002  

  21
  0
  Votes
  21
  Posts
  158
  Views

  

  @kevindd992002 No.
• N

  PiVPN and pfsense as Client
  • NiDeMa  

  9
  0
  Votes
  9
  Posts
  135
  Views

  N

  Here is a quick diagram...
• N

  PFsense OpenVPN Server trafic filtering
  • neguranegura  

  11
  0
  Votes
  11
  Posts
  68
  Views

  N

  No, I was talking about that maybe ip address "52.4.131.46" not beeing the right one for the website, for "https://rilm.org" So i've setup the things like u've said, and after that i've got no internet access, which is a good thing, but it also cuts access to "https://rilm.org", which is a bad thing. The only thing working in browser, going somewhere, is "52.4.131.46", and it reaches that nginx test page that I was talking about. So, it looks more like a DNS problem now. The DNS's entered here in options are Google's public ones. I've also tried push "route 192.168.1.0 255.255.255.0" in Advanced Config, to no avail.
• 

  Route IPv6 over VPN with IPv6 from HE
  ipv6 tunnelbroker hurricaine he.net ovpn • • Jxck  

  4
  0
  Votes
  4
  Posts
  41
  Views

  

  @Jxck Well, it certainly won't work, without it being configured on the VPN.
• O

  LAN side PC's cannot ping remote OpenVPN clients (solved)
  • Osquir  

  4
  0
  Votes
  4
  Posts
  59
  Views

  

  Glad you have it working now. Adjust your Client Firewall and turn it back on. -Rico
• 

  OpenVPN not using DNS set in options
  • x3rl  

  15
  0
  Votes
  15
  Posts
  70
  Views

  

  Nope not fixed when its not on wifi as in local it does not use the DNS.
• F

  Slected interface has no IPv4 address
  • fireix  

  1
  0
  Votes
  1
  Posts
  41
  Views

  No one has replied

• N

  Gateway IP for openVPN gets duplicated
  • nirmalts  

  6
  0
  Votes
  6
  Posts
  128
  Views

  N

  Ah! I guess I am getting it now. I thought the public IP (185.220.xxx.xxx) that the server provides me is enough for the server to communicte with me and that the Virtual IP and Gateway IP are something purely local to me and I can set it myself. I now understand that these IPs are something that the VPN Server hands out to its clients and is the way for the server to communicate with the client (and back). Is this right? So it absolutely does not make sense that I set it and expect that the server will "find me". I noticed that, after I setup the routing table, Virtual IP and Gateway IP with the above steps, data was going out into the tunnel but never coming back. This explains why the gateway was down. What I am trying to do, as I mentioned in my initial post, is to prevent duplicate Gateway IPs when I connect to different servers (of the same provider). As of now, after a pfSense restart, I connect and disconnect the VPN clients with the duplicated IPs and after 2-3 tries it gets an IP from a different subnet. I guess I will have to live with this workaround. @viragomann said in Gateway IP for openVPN gets duplicated: To prevent get pushed the route from the server, check "Don't pull routes". Then enter the network you want to route over the VPN into the "Remote network(s)" box. However, I'm not sure what you really want to route here. I see that I can only stop pulling the routes that the server pushes . I thought this option prevents setting the Virtual IP and Gateway IP and therefore thought this option isn't working for me and tried the pull-filter ignores where it appeared as if it is working for me. With my newly, self-learnt background of networking, I was trying out stuff expecting it to work. Thanks for explaining the fundamentals to me. On the other hand, I did see some discussions where it was mentioned that the duplicated Gateway IPs should not be an issue for pfSense loadbalancing as it does not do it with IPs and does not use the routing table. Is this true?
• R

  OpenVPN - Only works for a single user at a time.
  • raptor01uk  

  22
  1
  Votes
  22
  Posts
  3371
  Views

  

  @khuram said in OpenVPN - Only works for a single user at a time.: Also have you had any trouble with removing routes after a user is disconnected? With this workaround in place, the routes appear to not be removed. Eg. after I just received a .211 address, I see: x.x.x.208/29 x.x.x.177 UGS igb0.8 x.x.x.209 link#21 UHS lo0 x.x.x.210 link#21 UH ovpns3 x.x.x.211 ovpns3 UH ovpns3 x.x.x.216/29 x.x.x.177 UGS igb0.8 x.x.x.217 link#22 UHS lo0 x.x.x.218 link#22 UH ovpns1 That does not seem to create an issue for us.
• P

  Setup pfSense as a VPN server
  • paps_line  

  9
  0
  Votes
  9
  Posts
  85
  Views

  P

  hi, thanks só much for help, i was trying create without create vlan first and i realy don't know wy it doesn't worked. So, I create a vlan separated and did the same configuration as before using just WAN and it works, little bit slow but works, thanks
• D

  PHP crashing - OpenVPN services down
  php crl crashing • • davebu  

  4
  0
  Votes
  4
  Posts
  27
  Views

  

  Ok, perfect. @davebu said in PHP crashing - OpenVPN services down: i.e. its a 'newbie' issue. I guess you nail that one also asap.
• B

  OpenVPN strange disconnects
  • bbiketa  

  6
  0
  Votes
  6
  Posts
  38
  Views

  

  @bbiketa said in OpenVPN strange disconnects: I think it's OpenVPN server that's making problems, since other ovpn servers work fine and everyone Compare the OpenVPN server settings directly with each other : It lives here /var/etc/openvpn/ - and probably called : server1.conf.
• S

  OpenVPN client (AirVPN) packetloss when high traffic
  • stevetoza  

  8
  0
  Votes
  8
  Posts
  116
  Views

  D

  @nirmalts the monitor ip is the VPN_WAN gateway of each VPN client but when I didn't check "Don't pull routes" I was suffering packet-loss. VPN2_WAN without the "Don't pull routes" RTT is 8.1ms and I use it as the default route (0.0.0.0), using it for dns over vpn with the internal vpn dns ip.
• S

  Can't Access Network Segment Over OpenVPN
  • striker-pl  

  1
  0
  Votes
  1
  Posts
  47
  Views

  No one has replied

• S

  Why am I seeing OpenVPN twice?
  • striker-pl  

  4
  0
  Votes
  4
  Posts
  27
  Views

  V

  @striker-pl said in Why am I seeing OpenVPN twice?: Interesting. I don't see it listed under "Interface Groups". No, it's not displayed there. However, it is an interface group. So also consider that rules on the OpenVPN tab are applied as well if any and the group rules have priority over these on the interface tab according to the Firewall Rule Processing Order.
• C

  OpenVPN problem with 2 servers (1 tun, 1 tap)
  • chrisbnh  

  3
  0
  Votes
  3
  Posts
  27
  Views

  C

  Just another quick funny thing that's happening ... now when I connect to the tun server on 1194, I get a stream of "packet rejected" messages from 1195. It still works though.