Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Pfsesne 2.7.0 OpenVPN Client connected, RDP Work OK BUT no internet access

    Scheduled Pinned Locked Moved OpenVPN
    34 Posts 4 Posters 3.4k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • UnoptanioU
      Unoptanio
      last edited by Unoptanio

      Hello,

      After OPEN VPN Connection, in the remote client PC the browser have no internet.
      RDP Work OK. Inside RDP Internet is OK and mail and browser work OK.

      The problem is that Outside RDP, browse and mail have no internet.

      83e6ea8f-657f-42d0-8122-6b575cf0fa99-image.png

      My configuration is:

      500fa5d7-50f4-4d3f-bb12-e2b7c366f0fa-image.png

      2d5cde21-e8d5-4aea-9313-59cd091b47b3-image.png

      54b87a0e-1d78-4c88-963b-ef7da899b9dd-image.png

      28ea7f62-6a48-48af-85fc-c4f49e0edd71-image.png

      V 1 Reply Last reply Reply Quote 0
      • V
        viragomann @Unoptanio
        last edited by

        @Unoptanio
        Seems, the browser cannot resolve host names.
        Did you provide a DNS server in OpenVPN? If so and it's a public one, you need to add it to the "local networks".

        UnoptanioU 1 Reply Last reply Reply Quote 0
        • UnoptanioU
          Unoptanio @viragomann
          last edited by Unoptanio

          This post is deleted!
          V 1 Reply Last reply Reply Quote 0
          • V
            viragomann @Unoptanio
            last edited by

            @Unoptanio
            So you provide public DNS servers. However, this has nothing to do with the DNS settings in pfSense. You could also provide any other server in the VPN.

            Normally the client pulls these settings and use the stated DNS servers, when the connection is established.
            If you don't route them over the VPN, the client should access the DNS servers over its own upstream connection.
            So I assume, there is an issue on the client side. Maybe the clients log give hints about the problem.

            UnoptanioU 2 Replies Last reply Reply Quote 0
            • UnoptanioU
              Unoptanio @viragomann
              last edited by Unoptanio

              @viragomann

              https://docs.netgate.com/pfsense/en/latest/recipes/openvpn-s2s-route-internet-traffic.html

              I'm reading this article but I don't understand how to fix my problem.

              It seems to me that once you connect to the VPN there are two possibilities to use the internet:

              1. use the local internet connection of the client PC

              2. use the internet connection of the remote tunnel VPN server

              I use VPN to use RemoteDesktop safely. But I would also like to use the browser on my client pc using the connection of the local client pc or possibly with that of the remote server via the vpn tunnel.

              Currently every time I want to use the browser and email I have to disconnect from the vpn

              I made this setting.
              But it doesn't solve the problem:

              4d4da5b0-ad19-4a53-a608-c02d32f668b9-image.png

              1 Reply Last reply Reply Quote 0
              • UnoptanioU
                Unoptanio
                last edited by Unoptanio

                RESOLVED!!!!!!😂

                I've gone crazy.

                Enabling this item now works. I can access the internet (browser, email, etc) on the remote client pc while they are also connected in VPN with Remote Desktop

                e82a37f6-9a5c-4253-b922-ce53bf95296a-image.png

                8e06b290-46fe-47f5-b426-798a8c1b2bb0-image.png

                1 Reply Last reply Reply Quote 0
                • UnoptanioU
                  Unoptanio @viragomann
                  last edited by Unoptanio

                  @viragomann

                  Tested by checking the public ip.
                  On the remote client pc, the internet goes out with the local connection of the pc and not with that of the remote OpenVpn tunnel.

                  Do you know if it is possible to get it out with the remote VPN tunnel connection?

                  IPCONFIG in client pc:
                  dfbd8fff-2b98-4aae-88f9-4a135dd3bc13-image.png

                  bba73811-df44-476e-a638-937a1501461d-image.png

                  V 1 Reply Last reply Reply Quote 0
                  • V
                    viragomann @Unoptanio
                    last edited by

                    @Unoptanio
                    Go into the OpenVPN server settings and add a check at "Redirect gateway".

                    However, this also needs an outbound NAT rule on WAN for the source of the tunnel network. If you went through the wirzard, pfSense might have add it automatically, otherwise set outbound NAT back to hybrid mode and add the rule manually as you had it before.

                    UnoptanioU 1 Reply Last reply Reply Quote 1
                    • UnoptanioU
                      Unoptanio @viragomann
                      last edited by

                      @viragomann
                      5a8d4c97-41ef-430c-bcf7-5daaa49d60a2-image.png

                      UnoptanioU 1 Reply Last reply Reply Quote 0
                      • UnoptanioU
                        Unoptanio @Unoptanio
                        last edited by

                        @Unoptanio

                        if i check redirect ipv4 gateway then disappear ipv4 local network

                        21b0f243-07e2-4205-80bc-dc7f1ba8ccaf-image.png

                        V 1 Reply Last reply Reply Quote 0
                        • V
                          viragomann @Unoptanio
                          last edited by

                          @Unoptanio said in Pfsesne 2.7.0 OpenVPN Client connected, RDP Work OK BUT no internet access:

                          if i check redirect ipv4 gateway then disappear ipv4 local network

                          Yes, this is not needed anymore in this case.
                          It pushes the route for the local networks to the clients. Redirect gateway pushes the default route, i.e. any traffic is routed over the VPN.

                          UnoptanioU 1 Reply Last reply Reply Quote 1
                          • UnoptanioU
                            Unoptanio @viragomann
                            last edited by Unoptanio

                            @viragomann

                            df02aac7-56ba-424e-bf89-b2da67ee918c-image.png

                            great thanks it works. Tested now.
                            with this change the internet use the remote tunnel

                            UnoptanioU 1 Reply Last reply Reply Quote 0
                            • UnoptanioU
                              Unoptanio @Unoptanio
                              last edited by

                              @Unoptanio

                              The crucial setting that didn't make the internet work on the local pc but only the VPN was this

                              a2229232-0575-427c-b831-cabd9dc47d21-image.png

                              UnoptanioU 1 Reply Last reply Reply Quote 0
                              • UnoptanioU
                                Unoptanio @Unoptanio
                                last edited by Unoptanio

                                @Unoptanio

                                Performance:

                                Test speed under remote server openvpn on firewall pfsense: (1Gb optical fiber)
                                c212538d-922a-4a4c-a908-297e24ab4a3a-image.png

                                Test speed in remote pc client with OPEN VPN ON with internet routed on the remote server .......shouldn't it go faster?
                                23643115-d335-4910-a504-1d0e2d57d2f1-image.png

                                Test speed in remote pc client with OPEN VPN OFF with internet on local PC
                                e9910821-fdb2-4c0c-9278-bdb1f9c90e8c-image.png

                                GertjanG 1 Reply Last reply Reply Quote 0
                                • GertjanG
                                  Gertjan @Unoptanio
                                  last edited by Gertjan

                                  @Unoptanio

                                  I propose : replace these :

                                  133e0183-b761-4060-8d88-6d000b7c74c3-image.png

                                  with

                                  1129f442-860c-46ba-ba0b-957df23b6520-image.png

                                  where 192.168.3.1 is your tunnel IP, 10.10.94.1

                                  If you unbound settings are default, you're good :

                                  4b5b9404-f6e9-416f-af6e-f71e37e7e89d-image.png

                                  (All includes my OpenVPN server called SVPN)

                                  as unbound also listens on 10.10.94.1, the OpenVPN server IP on the pfSense side.

                                  Why ? Now you can use local URL/host names like server.XXXXpfSense.homa.arpa to join a RDP session on "server" on your LAN.
                                  8.8.8.8 and others don't know anything about your local devices ;)

                                  No "help me" PM's please. Use the forum, the community will thank you.
                                  Edit : and where are the logs ??

                                  UnoptanioU 2 Replies Last reply Reply Quote 1
                                  • UnoptanioU
                                    Unoptanio @Gertjan
                                    last edited by Unoptanio

                                    @Gertjan

                                    HI,
                                    that's what I've been trying to do for the last few hours. but at the moment I haven't succeeded yet.
                                    I would like to use the computer name in RDP sessions instead
                                    of the IP address

                                    RDP session using PC NAME not work.
                                    fda8aaac-4287-4672-8b01-0e053d475efe-image.png

                                    RDP session using ip address of PC work OK.
                                    a74d5a3f-1acd-4575-92d7-d621931782e4-image.png

                                    765b7893-2a07-4671-b78b-38e031a5d497-image.png

                                    i changed the pfsense config like you saids:

                                    9077cafa-f740-4a8e-b7a0-f1bae3e189b4-image.png
                                    e7957a13-cd73-4a73-a8cb-24579e434d95-image.png

                                    UnoptanioU 1 Reply Last reply Reply Quote 0
                                    • UnoptanioU
                                      Unoptanio @Unoptanio
                                      last edited by Unoptanio

                                      @Gertjan

                                      I find this in "services", "DNS RESOLVER?"

                                      e0694b42-e287-471f-9b40-4a41a2b81fb8-image.png

                                      I have not added the OPENVPN server in the interfaces.

                                      and consequently does not appear in the DNS resolver list.

                                      05e1edaf-35c6-4858-995d-2f752ecb7507-image.png

                                      S 1 Reply Last reply Reply Quote 0
                                      • S
                                        slu @Unoptanio
                                        last edited by

                                        @Unoptanio
                                        dou you have set firewall rules for the OpenVPN connection?

                                        pfSense Gold subscription

                                        UnoptanioU 1 Reply Last reply Reply Quote 0
                                        • UnoptanioU
                                          Unoptanio @slu
                                          last edited by

                                          @slu
                                          the openvpn wizard entered them automatically

                                          d3e5c548-273d-4a9a-8160-aecbcfc78dcd-image.png

                                          S GertjanG 2 Replies Last reply Reply Quote 0
                                          • S
                                            slu @Unoptanio
                                            last edited by

                                            @Unoptanio said in Pfsesne 2.7.0 OpenVPN Client connected, RDP Work OK BUT no internet access:

                                            the openvpn wizard entered them automatically

                                            no I mean internet access from your VPN client over the VPN into WAN.
                                            That was your question, or?

                                            pfSense Gold subscription

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.