Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    FreeRadius/OpenVPN not working on secondary PFSense - HA cluster

    Scheduled Pinned Locked Moved
    OpenVPN
    freeradius openvpn login authentication
    1
    1
    394
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • E
      eddgar9
      last edited by

      We have an architecture of 2 PFSense in High Availability Configuration on cloud.
      We always managed the single node PFSense and everything working well. We have a FreeRadius package to login our VPN users using pin + Google Authenticator.

      Now we deployed a secondary PFSense with completely HA and it's fully sync. I checked the configuration files, certificates and everything is exactly the same.

      FreeRadius gives an option to sync to a secondary unit and this is enabled too.

      While testing (shutdown primary) we noticed that the PFSense is not able to login VPN users (authentication failed). Again checked FreeRadius config, users, passwords and everything looks exactly like the primary node but always with the same error message from the OpenVPN client and Firewall logs (Authentication failed).

      Does anyone has any idea for further troubleshooting or any possible reasons?
      Thanks in advance.

      Some Pics:
      xmlrpc sync.png general logs.png freeradius xmlrpc sync.png

      1 Reply Last reply Reply Quote 0
      • First post
        Last post