What is OpenVPN 'Clients' tab?

wedwards

There's a 'Clients' tab tab under OpenVPN. I don't see it being mentioned in the 'getting started' documentation @ https://docs.netgate.com/pfsense/en/latest/vpn/openvpn/index.html . I couldn't find any mention of it in the rest of the documentation either, but it's very well possible I'm just looking over it.

I created an OpenVPN server using the wizard, and created a pfSense user with a certificate, and I'm able to connect to the VPN. So, I'm not sure what that 'Clients' tab is, because I already have a VPN client without it being mentioned or created there.

Judging by the configuration page, it looks like an alternative to creating an 'entire' OpenVPN server. In that case, why would I use a 'separate' client instead of a server? Could someone explain?

viragomann

@wedwards
You can set up an OpenVPN client here which connects to a remote server.
It is used for site-2-site VPNs or to direct partial or all upstream traffic to a VPN provider.

There is no wizard for configuring an OpenVPN client on pfSense.

NogBadTheBad

@wedwards said in What is OpenVPN 'Clients' tab?:

here's a 'Clients' tab tab under OpenVPN. I don't see it being mentioned in the 'getting started' documentation @ https://docs.netgate.com/pfsense/en/latest/vpn/openvpn/index.html . I couldn't find any mention of it in the rest of the documentation either, but it's very well possible I'm just looking over it.
I created an OpenVPN server using the wizard, and created a pfSense user with a certificate, and I'm able to connect to the VPN. So, I'm not sure what that 'Clients' tab is, because I already have a VPN client without it being mentioned or created there.
Judging by the configuration page, it looks like an alternative to creating an 'entire' OpenVPN server. In that case, why would I use a 'separate' client instead of a server? Could someone explain?

The Clients tab is for VPN clients connecting to other sites, i.e. NordVPN.

If you create an OVPN server on your pfSense box, it won't show in the Clients tab.

wedwards

Ah! That makes sense. I was under the impression that everything under 'Services' -> 'OpenVPN' was server-related, but pfSense can be a client too, of course.