That is just you killing the process when reconfiguring which terminates and restarts the client process. You are interrupting the system call that is listening for traffic when you give it the SIGTERM signal. The more-telling log entries are the Inactivity-timeout entries. I'd be sure that 171.25.221.131 is actually receiving your traffic on UDP/1194, the TLS keys match, etc..

Checking OpenVPN staus, I get Bad compression stub (swap) decompression header byte: 42. My settings are right.

https://docs.netgate.com/pfsense/en/latest/vpn/openvpn/configuring-a-site-to-site-pki-ssl-openvpn-instance.html https://docs.netgate.com/pfsense/en/latest/book/openvpn/site-to-site-example-configuration-ssl-tls.html https://www.netgate.com/resources/videos/site-to-site-vpns-on-pfsense.html And you need a Port Forward on OpenVPN Server side B on Mikrotik (OpenVPN server Port to pfSense). -Rico

@viragomann said in Remote Client VPN can't traverse site-to-site VPN: Additionally add the access servers tunnel network to the "Remote network/s" in the s2s settings on site2. That was it. Whoops. Adding 192.168.3.0/24 to Site2's site-to-site "Remote Networks" did the trick. Feeling a tad silly that I missed that .. multiple times. Appreciate the help!

@WereCatf Hi! What did you do?

Hi zwierzu85 and joao.eduardo Me too ! how are you resolved this problem ?? Please help me !?

I am having a very similar issue, I remeber not setting the link-mtu. Hope this works for me too. --edit-- my issue was the internal service was blocking with its firewall rules.

@curtisgrice thanks again!

Hard to say. I am inclined to say no, but I'd have to know the specifics of how it was intended to be implemented.

In the vast majority of cases were looking at less than 10 using RDP or small file access. Occasionally some EMR software. I wouldn't expect more than 10-15mbps peak throughput.

system > routing. is that set correctly? instead of using the default gateway. i have my default GW set to the tunnel i want it to go out of.. [image: 1558350857748-defaultgw.jpeg]

For what it is worth, i changed the default gateway for IPV4 under System / Routing / Gateways and got internet on lan client.

Yeah its very possible.. But plex reports what IP to the plex servers as its public? You can not port forward in via your vpn service IP can you.. Hit your actual wan IP directly, or use custom fqdn for your plex that resolves to your wan public.. Or make sure your policy routing what you want out your vpn, and not the plex.

@johnpoz Oke, I understand. So it's a coincidence that with AirVPN the outgoing IP is just 1 number difference. Thanks for the explanation!