• Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login
Netgate Discussion Forum
  • Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login

PfSense-Mikrotik

Scheduled Pinned Locked Moved OpenVPN
6 Posts 2 Posters 1.2k Views
Loading More Posts
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • I
    Ilya.V
    last edited by Dec 8, 2021, 3:07 PM

    Hello, friends!
    I just can’t make a vpn server on Pfsense with Mikrotik.
    I import certificates, configure the client - there is an error from the Pfsense side:
    Dec 8 15:53:24 openvpn 73912 xxx.xxx.xxx.xxx: TLS Error: cannot locate HMAC in incoming packet from [AF_INET]xxx.xxx.xxx.xxx:
    Dec 8 15:53:24 openvpn 73912 xxx.xxx.xxx.xxx: Fatal TLS error (check_tls_errors_co), restarting
    Dec 8 15:53:24 openvpn 73912 TCP connection established with [AF_INET]xxx.xxx.xxx.xxx:
    Help me, please)

    J 1 Reply Last reply Dec 8, 2021, 3:14 PM Reply Quote 0
    • J
      johnpoz LAYER 8 Global Moderator @Ilya.V
      last edited by Dec 8, 2021, 3:14 PM

      @ilya-v said in PfSense-Mikrotik:

      cannot locate HMAC in incoming packet from

      This screams mismatch in tls auth and encryption setting.

      mode.jpg

      An intelligent man is sometimes forced to be drunk to spend time with his fools
      If you get confused: Listen to the Music Play
      Please don't Chat/PM me for help, unless mod related
      SG-4860 24.11 | Lab VMs 2.8, 24.11

      I 1 Reply Last reply Dec 9, 2021, 5:56 AM Reply Quote 0
      • I
        Ilya.V @johnpoz
        last edited by Dec 9, 2021, 5:56 AM

        @johnpoz said in PfSense-Mikrotik:

        This screams mismatch in tls auth and encryption setting.

        What do I need to do to get the client to connect?
        There are two options in the dropdown list - "TLS Authentification" and "TLS Encryption and Authentification"
        If I choose the second one, all clients fall off.

        J 1 Reply Last reply Dec 9, 2021, 6:40 AM Reply Quote 0
        • J
          johnpoz LAYER 8 Global Moderator @Ilya.V
          last edited by Dec 9, 2021, 6:40 AM

          The client setting and server setting need to match..

          An intelligent man is sometimes forced to be drunk to spend time with his fools
          If you get confused: Listen to the Music Play
          Please don't Chat/PM me for help, unless mod related
          SG-4860 24.11 | Lab VMs 2.8, 24.11

          I 1 Reply Last reply Dec 9, 2021, 7:13 AM Reply Quote 0
          • I
            Ilya.V @johnpoz
            last edited by Dec 9, 2021, 7:13 AM

            @johnpoz said in PfSense-Mikrotik:

            The client setting and server setting need to match..

            I made a new vpn server without tls authentication. Everything is working)
            Thanks.

            J 1 Reply Last reply Dec 9, 2021, 7:15 AM Reply Quote 0
            • J
              johnpoz LAYER 8 Global Moderator @Ilya.V
              last edited by johnpoz Dec 9, 2021, 7:16 AM Dec 9, 2021, 7:15 AM

              @ilya-v authentication and encryption is better setting. Your clients just need to know to use it as well.

              An intelligent man is sometimes forced to be drunk to spend time with his fools
              If you get confused: Listen to the Music Play
              Please don't Chat/PM me for help, unless mod related
              SG-4860 24.11 | Lab VMs 2.8, 24.11

              1 Reply Last reply Reply Quote 0
              1 out of 6
              • First post
                1/6
                Last post
              Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.
                This community forum collects and processes your personal information.
                consent.not_received