@Gertjan I managed to talk the client into agreeing to remove the router. So everything is working fine. Thank you again for all your help.

Yes, the log should show what's happening there. OpenVPN is not running so it's probably got some setting that prevents it starting. A subnet conflict of somekind would be my first guess.

Steve

Anyone knows about this?

@marvosa I have currently got a bt smart hub with complete wifi discs. The modem/router gives me the option of 192.168.x.x or 172.16.x.x as ip addresses and for 172.16.x.x gives the router up as 172.16.0.1.it has dhcp which has already assigned devices 172.16.x.x addresses. I will be turning the firewall and dhcp off on this and switching it out for a DM200 modem and adding wireless access points. I just want to make sure now before I implement the pfsense into the live network that it will work OK. I am planning but am not 100% sure if I'm planning the right things. I hope so!
I need to get it working and for it to not bugger up the WiFi on our mobiles and other WiFi devices or I'll get it in the neck from the wife if pfsense starts blocking everything 🤦🏻‍♂️

@nirmalts said in pfSense becomes sluggish at times:

for a window of 2-3 hrs everyday.

Your check list is quiet complete.
Even the most smallest pfSense capable devices like these can crank out several tens of megabits per second, nearly always limited by what happens upstream.

The solution is easy : don't use VPN suppliers during that observed windows.

Remember : they all work with the "best effort" methods. And it seems that legal video streaming services ran out of 'not seen' content so the less legal providers are even more used. Which explains the massive "VPN" usage and it's consequences.

Of course mark also don't add/remove routes or don't pull routes. Otherwise you will kill the lan connection (don't understand why but it does).

That custom option was something that was leftover from trying on my own, I suspected the Local Networks box was the proper place where it supposed to be anywhere. I didn't set the 10.0.8.0/24 as a remote network in the branch office but upon taking your suggestion it now works. Thank you so much!

bump

@Rico said in No internet Access with OpenVPN after upgrading to pfsense 2.4.5 release:

erver/Clien

thanks!! all good now

We finally found the problem!

It was a previously misconfigured remote network subnet mask (/4 instead of /24 - probably a typo because this was done rapidly during a night) on the pfsense client that remained in the routing table. Somebody corrected the client's configuration afterward but probably forgot to restart the tunnel to update the routes.

And it explains very well why some destinations were treated differently than others.

I work remotely but it is important for me that my ID is in another country. For myself, I found a great way out veepn [link removed] is an excellent VPN that works without interruptions. I have been using it for 3 months and no problems were found.

@hawkbh. hi guys i have resolved it. thak you!

So, change the server did the trick.

@BuiltOnSelfSuccess said in Slooooooooooow connectivity:

MY VPN provider does not impose any bandwidth restrictions.

Are your still certain ? "impose" = willingly applying bandwidth restrictions is one thing. If a server is very popular, bandwidth will go down. It could even be de POP just before there server, something they do not control ...

@Rico said in OpenVPN Local Networks vs Remote Networks:

Sure for 2 or 3 Sites no big deal, but say you have 50 Sites and want to add one more....happy for any parameter you need to touch only once and push. ;-)

-Rico

Ok, that makes sense. So in the example in the link above, if you put all networks in the Local Networks field, will one of the sites add a route for its own LAN network?

There may very well be something that needs to be addressed in the AWS VPC settings, however, I am unfamiliar with the platform.

Short of a misconfig that I'm missing, an AWS VPC setting or something happening on the client-side, it's just troubleshooting at this point.

I PM'd you.

@Gil said in Removing a CA key:

That does appear to be a bit of a bug.
I'll manually edit the xml.
Thanks.

Fix:
https://redmine.pfsense.org/issues/10509