OpenVPN full tunnel with non-PFSense router
-
After a lot of help from various people, I finally figured out how to set PFSense OpenVPN with a different device as the firewall/router.
What was happening on my client (after I added redirect-gateway def1 to the client config file) was I could connect, but I couldn't get beyond the PFSense device. Turns out I needed to add a static route for the VPN traffic in my firewall (A Ubiquiti Dream Machine in my case.) That route goes from the IPv4 Tunnel Network specified in the Server configuration (e.g. 10.0.8.0/24), Distance 1, to the IP address of the box running PFSense. Once I did that, everything worked as expected. OpenVPN on the client connected, and all the traffic from the client was routed over the VPN and out through the ISP connection back home.
I just wanted to pass this along in case someone else runs into this.