Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    OpenVPN on another public ip address

    Scheduled Pinned Locked Moved OpenVPN
    14 Posts 3 Posters 1.3k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • jptferreiraJ
      jptferreira @viragomann
      last edited by

      @viragomann I tried without any luck. I've done this with fortigate (has built-in vpn support too) and sonicwall (same) firewalls but I'm not as familiar with pfsense. The manually created aliases work fine for other services that are enabled by the port forwarding rules... no problem there.
      The problem is on how to be able to forward a rule to the internal openvpn. Tried many rules and no luck.... tried forwarding to the firewall internal ip, no luck... many other options... no luck. Reading many posts looks like there is no need for this type of solution from pfsense users... so I'm bummed!
      Thanks

      V 1 Reply Last reply Reply Quote 0
      • V
        viragomann @jptferreira
        last edited by

        @jptferreira
        So will need some more infos.

        manually created aliase

        Which type of alias?

        The problem is on how to be able to forward a rule to the internal openvpn.

        An internal OpenVPN? Is it running on pfSense or behind?

        jptferreiraJ 1 Reply Last reply Reply Quote 0
        • jptferreiraJ
          jptferreira @viragomann
          last edited by

          @viragomann I'm using virtual ip addresses. I have a block of 5 statics that each is added as a Virtual Ip address under the firewall /Virtual Ips. Then I have Port forwards for each of of the services attached to each public ip. All working fine there. Have to use the 1:1 because of Voip requirements and some other services.
          Besides this it is a very simple setup.
          The VPN works great when the wizard is used and is set for the default public ip (not VIP because it is the default and not used for any other services).
          If during the wizard I select another one of the public IP addresses I have it reaches the vpn server logs but won't connect. The same configuration but switching to the default ip works fine.
          I hope this helps
          Thanks

          V 1 Reply Last reply Reply Quote 0
          • V
            viragomann @jptferreira
            last edited by

            @jptferreira
            No. I was asking for the VIP type. pfSense offers four, I think. So which?

            So the OpenVPN is running on pfSense itselft, no forwarding.

            What is the OpenVPN configuration? What are your WAN rules?

            jptferreiraJ 1 Reply Last reply Reply Quote 0
            • jptferreiraJ
              jptferreira @viragomann
              last edited by

              @viragomann I apologize, I'm using IP aliases. for theVirtual IP addresses assigned to the wan interface.

              Virtual IP Address
              66.xx.xx.xx1/29 WAN IP Alias 66.xx.xx.xx1
              66.xx.xx.xx2/29 WAN IP Alias 66.xx.xx.xx2
              66.xx.xx.xx3/29 WAN IP Alias 66.xx.xx.xx3
              66.xx.xx.xx4/29 WAN IP Alias 66.xx.xx.xx4
              10.10.10.1/32 LAN IP Alias pfB DNSBL - DO NOT EDIT

              The rule for the vpn is only one added by the wizard.
              IPv4 UDP * * WAN address 1194(OpenVPN) * none OpenVPN pfSense OpenVPN Server Wizard

              This one works fine because it isn't using any of the above VIPs.
              The OpenVPN is running on pfsense. Having it running on another machine would be just a matter of performing a port forward and wouldn't be a problem but I'm trying to not have one machine running just for the vpn.
              Thanks

              V ? 2 Replies Last reply Reply Quote 0
              • V
                viragomann @jptferreira
                last edited by

                @jptferreira said in OpenVPN on another public ip address:

                The rule for the vpn is only one added by the wizard.
                IPv4 UDP * * WAN address 1194(OpenVPN) * none OpenVPN pfSense OpenVPN Server Wizard
                This one works fine because it isn't using any of the above VIPs.

                IP Aliases works as well for OpenVPN.

                Since you might not need this rule from the wizard as you said, edit this rule and change the source IP to the desired virtual IP. Otherwise you can simply copy it by ticking this button ad307e39-7b5a-4728-93ff-904855b1469a-grafik.png
                and change the destination.

                Since you don't provide your OpenVPN settings I cannot give further hints.

                1 Reply Last reply Reply Quote 0
                • ?
                  A Former User @jptferreira
                  last edited by

                  @jptferreira said in OpenVPN on another public ip address:

                  This one works fine because it isn't using any of the above VIPs.

                  publish your Wan side firewall rule

                  jptferreiraJ 1 Reply Last reply Reply Quote 0
                  • jptferreiraJ
                    jptferreira @A Former User
                    last edited by

                    @silence on pfsense I still can't find an easy way to export settings besides taking screenshots... any hints on how to do it?
                    Thanks

                    ? 1 Reply Last reply Reply Quote 0
                    • ?
                      A Former User @jptferreira
                      last edited by

                      @jptferreira said in OpenVPN on another public ip address:

                      any hints on how to do it?

                      01e4f58c-12ef-4d5f-baa7-15472c2f5be5-image.png

                      V 1 Reply Last reply Reply Quote 0
                      • V
                        viragomann @A Former User
                        last edited by

                        @silence
                        Requesting the whole config seems quite dubious to me.

                        @jptferreira
                        There are many secrets inside this, you might not want to publish at all.

                        jptferreiraJ ? 2 Replies Last reply Reply Quote 1
                        • jptferreiraJ
                          jptferreira @viragomann
                          last edited by

                          @viragomann thanks guys... I always remove anything that "shouldn't be there"
                          Really appreciate the quick replies!
                          JP

                          1 Reply Last reply Reply Quote 0
                          • ?
                            A Former User @viragomann
                            last edited by

                            @viragomann said in OpenVPN on another public ip address:

                            Requesting the whole config seems quite dubious to me.

                            It didn't ask him for his configuration, he asked for his wan-side firewall rules and I showed him how to make a backup since he asked.

                            @jptferreira said in OpenVPN on another public ip address:

                            @silence on pfsense I still can't find an easy way to export settings besides taking screenshots... any hints on how to do it?
                            Thanks

                            waiting firewall rules wan

                            1 Reply Last reply Reply Quote 0
                            • First post
                              Last post
                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.