Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    OpenVPN does not work on bridged PFsense router

    Scheduled Pinned Locked Moved OpenVPN
    71 Posts 3 Posters 10.6k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • JonathanLeeJ
      JonathanLee @george1116
      last edited by

      @george1116 it says udp4 that is upd ipv4 some systems cannot understand it like my iphone it just wants it to say udp.

      Make sure to upvote

      G 1 Reply Last reply Reply Quote 1
      • G
        george1116 @JonathanLee
        last edited by george1116

        @JonathanLee

        Modified and it didn't work either 😧

        still failing at

        2024-01-03 09:53:25.497694 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
        2024-01-03 09:53:25.497766 TLS Error: TLS handshake failed
        
        V JonathanLeeJ 2 Replies Last reply Reply Quote 0
        • V
          viragomann @george1116
          last edited by

          @george1116
          What shows the server log?

          G 1 Reply Last reply Reply Quote 0
          • JonathanLeeJ
            JonathanLee @george1116
            last edited by

            @george1116 dang

            Make sure to upvote

            1 Reply Last reply Reply Quote 0
            • JonathanLeeJ
              JonathanLee @george1116
              last edited by JonathanLee

              @george1116 Hold on ...

              @george1116 said in OpenVPN does not work on bridged PFsense router:

              I then installed openVPN on my pfsense router, but when I am connected directly to my home router (the bridged router) openVPN is not able to connect, however, when I connect via tethering to my mobile device hotstpo OpenVPN connects successfully.

              Are you attempting to connect while you are on the private network that has pfSense??

              That won't work if that is what you are doing, this is for when you are not home and want to access your NAS or home network.

              Are you connected to your hotspot on your laptop? And this works?

              After you test connected to your LAN and VPN to your device correct and this is when it fails?

              If this is the case, you need a rule for your LAN to route that traffic you want for your VPN too, right now it is set up for WAN VPN access..

              Example: ( I am working on a Java program at home it's huge I debug it at work and or school and I want to work on the same file so I have it saved on my NAS, I access my VPN and work on that same file remotely on the NAS)

              Make sure to upvote

              G 1 Reply Last reply Reply Quote 0
              • G
                george1116 @viragomann
                last edited by

                @viragomann Same error from the server

                Screenshot 2024-01-03 at 9.56.42 AM.png

                V JonathanLeeJ 2 Replies Last reply Reply Quote 0
                • V
                  viragomann @george1116
                  last edited by

                  @george1116
                  The client tries to connect via IPv6.
                  Is this, what you intend?

                  G 1 Reply Last reply Reply Quote 0
                  • G
                    george1116 @JonathanLee
                    last edited by

                    @JonathanLee

                    No not at all, I just wanted to paint a picture of my setup.

                    I am attempting to connect while on my home router wifi, the LAN port from that modem-router is bridged and I have pfsense connected to the LAN port.

                    1 Reply Last reply Reply Quote 1
                    • JonathanLeeJ
                      JonathanLee @george1116
                      last edited by JonathanLee

                      @george1116 it's an IPV6 issue see it in the logs....Do you have that enabled in pfsense?

                      Change it to upd6 see if that works it was set to udp4 but upd should have set it to auto

                      Make sure to upvote

                      1 Reply Last reply Reply Quote 0
                      • G
                        george1116 @viragomann
                        last edited by george1116

                        @viragomann We changed the remote mode to udp so it makes sense that it's trying to connect with ipv6 and ipv4.

                        V JonathanLeeJ 2 Replies Last reply Reply Quote 0
                        • V
                          viragomann @george1116
                          last edited by

                          @george1116
                          The protocol has nothing to do with the IP version.
                          Is the server even configured for IPv6?

                          Just try to connect to the IPv4 to see if it makes a difference.

                          JonathanLeeJ 1 Reply Last reply Reply Quote 0
                          • JonathanLeeJ
                            JonathanLee @viragomann
                            last edited by

                            @viragomann I had him set it from udp4 to just udp to test it was not working with udp4 on the client export file

                            Make sure to upvote

                            V 1 Reply Last reply Reply Quote 0
                            • JonathanLeeJ
                              JonathanLee @george1116
                              last edited by

                              @george1116

                              Is your OpenVPN set like this?

                              f0d8db49-8cba-4730-9b39-f725ea8dd08f-image.png

                              Make sure to upvote

                              G 1 Reply Last reply Reply Quote 0
                              • V
                                viragomann @JonathanLee
                                last edited by

                                @JonathanLee
                                If the client config file only has an IPv4 remote line, it would use it, but not IPv6.

                                I guess, he has an host name in the remote line and the internal DNS resolves it to IPv6.

                                JonathanLeeJ G 2 Replies Last reply Reply Quote 1
                                • G
                                  george1116 @JonathanLee
                                  last edited by george1116

                                  @JonathanLee

                                  I changed it from that to this

                                  <br/>
                                  Screenshot 2024-01-03 at 10.12.12 AM.png

                                  JonathanLeeJ 1 Reply Last reply Reply Quote 0
                                  • JonathanLeeJ
                                    JonathanLee @viragomann
                                    last edited by

                                    @viragomann He could create a host override for it right?

                                    Make sure to upvote

                                    V 1 Reply Last reply Reply Quote 0
                                    • JonathanLeeJ
                                      JonathanLee @george1116
                                      last edited by

                                      @george1116 is your wan have ipv6 listed under status in pfsense?

                                      I am thinking set that to ipv4 only and test again

                                      Make sure to upvote

                                      1 Reply Last reply Reply Quote 0
                                      • V
                                        viragomann @JonathanLee
                                        last edited by

                                        @JonathanLee said in OpenVPN does not work on bridged PFsense router:

                                        @viragomann He could create a host override for it right?

                                        I guess, his DNS resolves the host to an IPv6 as mentioned. Presumably due to DHCPv6 DNS registration.
                                        I don't think that a host override would be a solution here.

                                        JonathanLeeJ 1 Reply Last reply Reply Quote 0
                                        • JonathanLeeJ
                                          JonathanLee @viragomann
                                          last edited by

                                          @viragomann I wonder if his WAN IP he is connecting to is IPV4, I wonder if that interface shows IPV4 only he said he has a router before pfSense and not pfSense first, so I think pfSense is getting ipv4 only on the wan interface

                                          Make sure to upvote

                                          1 Reply Last reply Reply Quote 0
                                          • G
                                            george1116 @viragomann
                                            last edited by george1116

                                            @viragomann Screenshot 2024-01-03 at 10.22.19 AM.png

                                            After changing it back this is all I get.

                                            @JonathanLee You mean it shows IPV4 but it really isn't?

                                            JonathanLeeJ V 2 Replies Last reply Reply Quote 1
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.