@peterzy thank you for your reply.

In my case all the Mikrotik client devices are in the rural area, so maybe I can make the current VPN to work using UDP (this is the current config) and once I get access to the device I can change the config to TCP. If the device could get connected for a couple of hours for me that's enough.
In this regards, could you please share the details about changing the PING settings so maybe I can get them connected temporaly.

Thank you!

@PlanetToysUtah
Is the CSO applied??
Please show the log.

I don't think I have misconfigured it, because the same configuration works fine on Ubuntu. So it should be a problem with pfsense. Does anyone have successful experience using DCO on pfsense?

@viragomann thanks buddy

@The-Party-of-Hell-No I tested its OK :-) thanks you!!!

@kprovost The speed difference is substantial with only having one enabled so much so I would say this would need a Redmine to only allow one to be selected at a time. Anyone else agree?

@rajukarthik

So it's a question about the OpenVPN client app called "Tunnelblick " running on a device that not pfSense.

Ask Tunnelblick ?!
Or use the OpenVPN app, also available for MAC ?!

@kprovost thanks for your help I went from 18kbs-200 up to 580kbs that was significant with mss clamping max enabled

@Gertjan
The page links to an OpenVPN config files page which has no mention of pfsense.
The CA,crt files look very odd in that they contain 2 lots of certificate data.
I could not get either to work. The CA file sent to me by a tech support guy worked fine.
Thanks again for your assistance

It is probably related to the NPS Extension for Azure MFA version, of which we have the latest 1.2.2216.1. My guess is that the prior successful posts were all written when using earlier versions of NPS Extension for Azure MFA.

@Antibiotic Now remove everything regarding OpenVPN and adjust Wireguard from the same provider and traffic anyway not going over VPN. What the hell is going on with this BETA?

Hello,

i ran into this issue quite a while ago. Last time i tried to use ec25519 certs i went to the official doku pages.
They are referencing to a list of compatible / accepted algorithm but unfortunately forget to put a link to this list into the dokumentation.
Certificate Properties -> curve name.

Does somebody know were to find this reference?

Thank you very much.

@snewby review the following from documentation
Short of changing MSS, Options to scale ovpn are quite limited

https://docs.netgate.com/pfsense/en/latest/vpn/performance.html#scaling-openvpn

@ojosaghae
Clients in VPN - OpenVPN - Clients - are for VPN services like SurfShark, NordVPN. ExpressVPN.. where the connections you create to these services would show as clients. I think you are running your own OpenVPN server for "Road Warrior" access. So no, if I am correct in my perspective.

However if you want to assign a specific IP to each "Road Warrior" device you can us the "Client Specific Overrides" - VPN - OpenVPN - Client Specific Overrides.

@viragomann nevermind LOL im such an idiot. U are correct sir, it was a windows firewall issue, I feel so stupid!!!! Im connecting to my shares now

@cotton "Great success"...if you know what i mean.