OpenVPN

• C

  Filter on tun interfaces
  • capitangiaco

  1
  0
  Votes
  1
  Posts
  1858
  Views

  No one has replied

• N

  Only one PPTP connection at a time?
  • nexusone

  5
  0
  Votes
  5
  Posts
  2444
  Views

  S

  @nexusone: I did search but didnt see any clear answers on why this problem exists. With that said, what is the simplest and most preferred alternative to PPTP that will support multiple users? OpenVPN works good.
• W

  Firewall Rules on OpenVPN Connections?
  • Wolfgang

  9
  0
  Votes
  9
  Posts
  3191
  Views

  S

  @talong99: Where could I manually add such rules so that they would be loaded the same time as the rules specified in the UI? There are no facilities for this.
• J

  WAN Rule blocking access to VPN
  • jadiaz

  3
  0
  Votes
  3
  Posts
  2237
  Views

  J

  Thanks. I got it to work when I rebooted pfSense. Not sure why that needs to happen.
• B

  Possible OpenVPN feature?
  • Brian_Andle

  1
  0
  Votes
  1
  Posts
  1946
  Views

  No one has replied

• Z

  Openvpn routing to ipsec
  • z00te

  3
  0
  Votes
  3
  Posts
  2384
  Views

  Z

  Hi, tnx for the quick answer, i've just tried to set openvpn with the remote subnet as you say, but the problem remain. Still no routing… probably i'm missing some settings on the openvpn server to route traffic of the openvpn tunnel through the ipsec tunnel. I'll investigate a little more  (or could give a try to pptp  :-\ ) Yes, I know that with the actual config only local office (192.168.200.0/24) can access through every other subnet, but for now is what we want. Do you think this could be a problem for the mobile user? tnx for your help PS: does anyone know if it's possible do configure openvpn client with username/password?
• H

  New at openvpn
  • heze54

  2
  0
  Votes
  2
  Posts
  1989
  Views

  H

  I think OpenVPN can accomodate your needs. pfSense provides a wonderful implementation of OpenVPN. There are still some kinks to be ironed out, namely the firewall rules for the OpenVPN interface, but they will get it working. Regardless, it works anyway with some manual steps. I recommend that you go to www.openvpn.net and read-up on OpenVPN before jumping into it. It is a very powerful and versatile package and along with that comes a bit of a learning curve.
• M

  Not connecting through Openvpn
  • moffl

  4
  0
  Votes
  4
  Posts
  6409
  Views

  J

  @fernandotcl: @moffl: Dec 23 05:38:27 openvpn[371]: WARNING: 'ifconfig' is used inconsistently, local='ifconfig 192.168.30.1 192.168.30.2', remote='ifconfig 10.190.115.1 10.190.115.2' @jette: Jan 19 09:49:40    openvpn[377]: WARNING: 'ifconfig' is used inconsistently, local='ifconfig 10.0.10.1 10.0.10.2', remote='ifconfig 10.0.200.1 10.0.200.2' Your address pool must be the same in both client and server. Thanks a lot for your reply.  The problem is fixed now.  But I still have problem in accessing the remote network.  I can ping 10.0.200.253 in the firewall (10.0.100.254) but I can't ping 10.0.200.253 in my lan (10.0.100.0/24).  Is there anything I missed in the setting?  Thanks a lot. Regards, Jette
• T

  ICMP through OpenVPN
  • tyns

  6
  0
  Votes
  6
  Posts
  5807
  Views

  H

  @sullrich: @Helix26404: There IS a way to directly configure OpenVPN firewall rules, but it's not widely known nor talked about. It's through the LAN interface. Make a firewall rule on the LAN interface that is specific to this particular situation and put it on top. See if that helps. Most likely because that only handles one side of the conversation.  We do not talk about it because its not a real fix. Unless you control both ends of the tunnel you will feel secure but the oppisite is true.  Therefore we simply say there is no firewall rules possible on 1.0 across OpenVpn and IPSEC tunnels, but, we are working on this. Gotcha. So this is why anyone in the remote network can access anything in the local network (pfSense-side if we're assuming it's the server) provided the routes are set up correctly on the client-side. I was racking my brain trying to figure out why I could get traffic IN through the tun0 interface, but I couldn't get OUT unless I was using the pfSense box itself. At first I thought it was a route issue, but then realized that the firewall was locking it down. Setting up explicit rules permitting traffic from any source to destination OPVN interface and destination OPVN remote network did the trick. Thanks for the elaboration from the "inside". :)
• H

  Can someone tell me what this means?
  • Helix26404

  1
  0
  Votes
  1
  Posts
  2104
  Views

  No one has replied

• H

  OpenVPN executable
  • Helix26404

  4
  0
  Votes
  4
  Posts
  2718
  Views

  N

  at the terminal, type: which openvpn
• V

  Document: How to configure OpenVPN shared key tunnels using pfSense and OpenWRT.
  • vleinone

  2
  0
  Votes
  2
  Posts
  12138
  Views

  H

  Nice, I'll link it from the tutorials site later when I get time. Thanks!
• S

  OpenVPN not reliable, use VPNCHECK
  • s0nic

  5
  0
  Votes
  5
  Posts
  3741
  Views

  S

  Look in the package area.  There is a rc.d thread that is a sticky.
• E

  Configuration Question
  • esposj

  1
  0
  Votes
  1
  Posts
  1848
  Views

  No one has replied

• M

  Questions regarding openvpn
  • moffl

  3
  0
  Votes
  3
  Posts
  2153
  Views

  M

  thanks I read the stickys and searched but didn't come up with those answers. i have a openvpn connection running.
• C

  Problems routing all traffic through tunnel
  • chillster

  15
  0
  Votes
  15
  Posts
  7477
  Views

  T

  @dairaen: cheers, tpunder, could you please send me or upload a screenshot of your working outbound NAT rules so i can add them to the tutorial? thanks. kind regards dairaen No problem, I just sent a PM with a screenshot.
• T

  Latest snapshot 12-11 and OpenVPN server
  • trendchiller

  1
  0
  Votes
  1
  Posts
  2229
  Views

  No one has replied

• C

  Shared Key Invalid?
  • chuck

  2
  0
  Votes
  2
  Posts
  6313
  Views

  B

  Follow this nice tutorial http://www.uplinksecurity.de/data/pfsense-ovpn.pdf
• T

  Multiple PFsense openvpn clients connecting to one PFsense openvpn server
  • tunge2

  4
  0
  Votes
  4
  Posts
  2602
  Views

  T

  me to :) (ipsec is easy) but i want it with Openvpn
• ?

  Securing WLAN with OpenVPN
  • Guest

  13
  0
  Votes
  13
  Posts
  5864
  Views

  T

  If I'm understanding what you want…. On your WLAN... only create a rule to allow the OVPN connection. Then you'll push DNS,WINS, and GATEWAY via OVPN also add a push route to your LAN, if you want a connection there.
• J

  Pfsense and other firewalls
  • jasco

  2
  0
  Votes
  2
  Posts
  2202
  Views

  H

  I haven't used openvpn yet but I have several locations running ipsectunnels. Biggest network consists of 12 locations that are all connected to each other through the mainoffice (only location that has a static IP) which acts as vpn concentrator. This setup is only using pfSense's everywhere. I also have another setup where a pfSense CARP cluster has VPN connections to a cisco pix, another pfSense and a sonicwall. Everything works smooth :-) For some examples how to configure the non pfSense systems see http://doc.m0n0.ch/handbook-single/#Example.VPN . Before you start to set this up you need to do some subnetcalculations. If you use IPSEC for that and need the remote locations to talk to each other through the central location you need to use some bigger subnetmasks at the central unit.
• P

  Connected Users
  • peterclo

  2
  0
  Votes
  2
  Posts
  2028
  Views

  S

  Someone was working on a status page.  Search the forum.
• S

  Site 2 site vpn question
  • StefanSander

  8
  0
  Votes
  8
  Posts
  4605
  Views

  T

  the site 2 site is very simple to set up (with the pdf document)…. but is it also possible to connect 3 pfsense client machines to one openvpnserver-pfsensemachine and routed the networks behind the 3 pfsense machines......(i don't want to open to much external (firewall) ports PC1                                              PC2       |                                                | NETWORK1                                NETWORK2                                NETWORK3       |                                                |                                          | OPENVPNCLIENT1                    OPENVPNCLIENT2                        OPENVPNCLIENT3       |                                                |                                          | PFSENSE1                                  PFSENSE2                                  PFSENSE3       |                                                |                                          |     ---------------------------------------------------------------------                                                       |                                                                                    OPENVPNSERVER                                                 PFSENSE4                                                       |                                                       PC3 So that PC2 can ping PC1 and PC3 and PC3 can ping PC2 and PC1 and PC1 can ping PC2 and PC3
• A

  OpenVPN with Hifn 7955 support
  • awestwell

  10
  0
  Votes
  10
  Posts
  8670
  Views

  B

  @Numbski: billm, I hope you're wrong about this.  Here's why: I have a client that needed some serious entropy available to an application.  We purchased a hifn card to supplement /dev/random.  FreeBSD does not create /dev/hwrandom, and from all appearances, speed of the customer's application went waaay up, and the deployment passed some certification process that I was not involved in.  So….hmm. Interesting stuff.  Perhaps I should dig into this further?  BTW, another option if I recall correctly would be to insert a sound card, get the driver working, get the block device for the mic-in, then take and have that constantly dumping to /dev/random too. (don't hold me to that, never personally tried it!) You're probably correct. –Bill
• E

  Installation problem with openvpn
  • elfron2k

  5
  0
  Votes
  5
  Posts
  2940
  Views

  H

  Maybe a link in the tutorial to http://www.openvpn.se/mycert/ would be nice too.
• T

  1.0.1 possible bug [with openvpn] ?
  • trendchiller

  3
  0
  Votes
  3
  Posts
  2884
  Views

  T

  Ok… Thanks... thought so... then I'll test a little more  :P
• P

  Accessing Windows shares
  • peterclo

  11
  0
  Votes
  11
  Posts
  9662
  Views

  D

  cheers, i will add all solutions & fallbacks to the tutorial so we can prevent further problems like these. will be online next week. kind regards dairaen
• P

  OpenVPN oddity
  • prophecy

  4
  0
  Votes
  4
  Posts
  3012
  Views

  P

  ok scratch that. its fixed
• B

  How to delete vpn tun interface
  • batmanAgen

  4
  0
  Votes
  4
  Posts
  11941
  Views

  N

  ifconfig tunX destroy
• P

  Can't access LAN from WAN
  • peterclo

  15
  0
  Votes
  15
  Posts
  12300
  Views

  D

  Maybe you could add a "Beware of your gateway" line in the section where you're supposed to test your new VPN tunnel? done ;)
• C

  Network from VPN Server unreachable through the Lan
  • cracker

  8
  0
  Votes
  8
  Posts
  8871
  Views

  D

  Your not going to like to hear this but I went with IPSEC vpn's instead.  The interface is much more reliable and pfsense's implementation will allow you to configure the server as a remote client portal.  All the pfsense clients connect as if they were a site to site and it takes care of all routes beautifully.  It doesnt matter if they are dynamic or static ip's with this conifig also.  I will keep checking with OVPN and hopefully they will have all the kinks worked out soon.
• M

  Openvpn issues since 1.0RC3
  • MathieuMa

  8
  0
  Votes
  8
  Posts
  4840
  Views

  S

  After the openvpn tunnel comes up, openvpn launches our script that reloads the filter rules, then it notices tun0 and sets everything up.
• R

  OpenVPN Weirdness
  • Russ

  5
  0
  Votes
  5
  Posts
  5408
  Views

  S

  Update to the latest 1.0-RCe… Upload a, b,c,d,e. We changed how OpenVPN is launched now.
• B

  Password protected certificates in openvpnclient
  • bernt

  1
  0
  Votes
  1
  Posts
  2306
  Views

  No one has replied

• A

  Brigde mode in 1.0-RC3
  • adamn

  3
  0
  Votes
  3
  Posts
  2611
  Views

  A

  Thanks, now its works
• C

  Howto restrict traffic to/from OVPN (tunx) interface
  • cracker

  3
  0
  Votes
  3
  Posts
  2903
  Views

  H

  Neither on IPSEC in 1.0 if that is the next question.
• P

  OpenVPN Site 2 Site connection PFSence v1.0-RC3
  • pisang98

  4
  0
  Votes
  4
  Posts
  8230
  Views

  F

  Do NOT assign tun interfaces to pfSense interfaces, under ANY circunstance. If you're getting timeouts, you're missing a pass rule on WAN on your firewall rules or something like that. Again, I can't stress enough, DO NOT ASSIGN TUN INTERFACES!
• S

  How to activate OpenVPN on RC2?
  • StefanSander

  3
  0
  Votes
  3
  Posts
  3240
  Views

  D

  I am having the same issue and have recently upgraded to R3 with no help.  I also tried downloading the latest snapshot but the images arent available from the link.  Any ideas?
• S

  OVPN Troubleshooting, please help
  • StefanSander

  7
  0
  Votes
  7
  Posts
  6644
  Views

  N

  Yeah, that only works when bridging, and well, you can see the novella being created by my efforts to get that working. :P
• 

  OpenVPN Client configuration in Snapshot 06-09-21 and previous
  • JeGr

  3
  0
  Votes
  3
  Posts
  3041
  Views

  

  Ah didn't figure that out - must be missing the "both" keyword in the "ports" keyword description. Thanks for pointing out. Yeah, right, the tunnel is supposed to be established between the two devices on the same port on both ends, as that makes maintaining the firewall ports easier and more transparent.