• Routing loop with my configuration

    1
    0 Votes
    1 Posts
    415 Views
    No one has replied
  • No Traffic into OpenVPN Tunnel until Static Route is set

    2
    0 Votes
    2 Posts
    394 Views
    V
    @kekskrümel said in No Traffic into OpenVPN Tunnel until Static Route is set: 0.0.0.0/1 to the tunnel gateway 10.100.6.29 0.0.0.0/1 is only the half IPv4 range, so this cannot stand for the default route. Furthermore, how have you set that route? A static route on pfSense or a CSO? Are you talking about an access server and you want to route the whole traffic of only one client over the VPN? So if the server uses TLS/SSL auth set up a CSO for the clients cert common name and check "redirect gateway".
  • Configuring pfSense as OpenVPN client

    17
    0 Votes
    17 Posts
    4k Views
    DerelictD
    What VPN provider is this? Have you verified that the routes being pushed actually cover the addresses of the sites you think should be routed that way? Are any of the route add logs indicating failure? Are the pushed routes actually going tinto the routing table? If so, pfSense and OpenVPN are working fine here.
  • 0 Votes
    4 Posts
    3k Views
    V
    https://www.netgate.com/docs/pfsense/virtualization/virtio-driver-support.html
  • Remote access connection issues

    10
    0 Votes
    10 Posts
    1k Views
    M
    How are you trying to access your resources? I see one issue: push "dhcp-option DOMAIN 192.168.11.1" You are pushing a DNS domain of 192.168.11.1 to your clients, so all of your name searches are being appended with "192.168.11.1" which is incorrect. The DNS Default Domain box in your config should have the name of your domain (e.g. MyDomain.com) in it, not an IP. Are you even using AD? If not, you shouldn't be pushing a DNS default domain. I also see you have an AirVPN client tunnel configured. Is that new? I would modify the firewall rule on the OpenVPN tab, so it's explicit to your remote access tunnel network and your LAN. In other words, change the source to 10.0.11.0/24 and change the destination to "LAN net". What do the rules look like on your AirVPN_WAN_HK tab? Hopefully, you don't have an any/any in there :) Another question, what version of PFsense were you running on your old hardware? What version are you running now?
  • Connect Mac Client to subnet behind pfSense OpenVPN server

    4
    0 Votes
    4 Posts
    835 Views
    DerelictD
    In the OpenVPN Server configuration on pfSense. A push route configuration on a client makes little sense.
  • Authentication OpenVPN fails when Windows AD shortens logonName

    1
    0 Votes
    1 Posts
    316 Views
    No one has replied
  • 0 Votes
    1 Posts
    286 Views
    No one has replied
  • OpenVPN Client Export (Can't export real inline config .opvn file)

    4
    0 Votes
    4 Posts
    573 Views
    S
    @gertjan Oh ! this issue is solved, because my "IDM" (Internet Download Manager), i have disabled IDM and download config file with native browser downloader and it's work !!!!! Thank for reply and support me !!!!
  • OpenVPN Routing Advice Needed

    7
    0 Votes
    7 Posts
    949 Views
    M
    @viragomann When I added the NAT rule you suggested I left the other NAT rule. It didn't help. I took a look at the routing rules and eventhing is correct. Both now have the explicit routing rule but no change.
  • how to improve openvpn performance/ Am I doing this right way

    1
    0 Votes
    1 Posts
    375 Views
    No one has replied
  • Slow Upload OpenVPN

    4
    0 Votes
    4 Posts
    660 Views
    M
    Ok so i think i have found the issue but need some help fixing it I think it maybe a MTU size issue when copying over smb. I have tried some options fragment 1400 mssfix 1400 The server seems to accept it but when i add to client and click connect it errors saying failed to connect to management service. Anyone got any ideas?
  • pfsense-to-pfsense tunnel up? No traffic?

    7
    0 Votes
    7 Posts
    667 Views
    T
    Thanks!
  • openvpn packets getting returned over WAN gateway and not VPN gateway

    17
    0 Votes
    17 Posts
    2k Views
    DerelictD
    Check Don't Pull Routes in the VPN client.
  • OpenVPN Radius Client not showing up in Client Export

    3
    0 Votes
    3 Posts
    596 Views
    M
    Doh! Missed that step. Been a while since I setup a new user. Thanks for the answer.
  • PIA used on a dedicated interface setup for that purpose

    1
    0 Votes
    1 Posts
    286 Views
    No one has replied
  • OpenVPN - can't ping Windows 10

    openvpn windows 10 access resource
    6
    0 Votes
    6 Posts
    2k Views
    RicoR
    ...this is what I already told you 2 days ago. -Rico
  • Multiple VPNs talking to each other

    6
    0 Votes
    6 Posts
    863 Views
    V
    In some scenarios that's necessary for handle the routing with multiple VPNs. Just assign an interface to the VPN instance and enable it. Otherwise check the routes on site B and C and use traceroute to find out where the packets go to.
  • quick road warrior question

    8
    0 Votes
    8 Posts
    905 Views
    GertjanG
    Normally, when I use my iPhone and the VPN to connect to my work (have a pfSense over there) the App I use to connect to my DVR on the LAN, it uses the low resolution video stream when it shows all the videos. When I focus one stream, I could switch to high res. Every stream has a 1 Mbit/sec stream at least when my cameras are in colour mode. My VDSL upstream from works is hardly a 2 Megabit/sec connection, so yes, I could overload that one very easily..
  • Common name containing underscore

    13
    0 Votes
    13 Posts
    2k Views
    GilG
    Yes Pippin, I think that is best practice - and I do that. You should also ensure that you Enforce CN / User Matching when using CSO's Otherwise; a user with a valid cert can circumvent the intended CSO routing / firewalling if he knows another user's name & pwd. (Or a mindless Sys Admin can get himself confused )
Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.