Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    OpenVPN does not work on bridged PFsense router

    Scheduled Pinned Locked Moved OpenVPN
    71 Posts 3 Posters 10.6k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • G
      george1116 @JonathanLee
      last edited by george1116

      @JonathanLee

      Modified and it didn't work either 😧

      still failing at

      2024-01-03 09:53:25.497694 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
      2024-01-03 09:53:25.497766 TLS Error: TLS handshake failed
      
      V JonathanLeeJ 2 Replies Last reply Reply Quote 0
      • V
        viragomann @george1116
        last edited by

        @george1116
        What shows the server log?

        G 1 Reply Last reply Reply Quote 0
        • JonathanLeeJ
          JonathanLee @george1116
          last edited by

          @george1116 dang

          Make sure to upvote

          1 Reply Last reply Reply Quote 0
          • JonathanLeeJ
            JonathanLee @george1116
            last edited by JonathanLee

            @george1116 Hold on ...

            @george1116 said in OpenVPN does not work on bridged PFsense router:

            I then installed openVPN on my pfsense router, but when I am connected directly to my home router (the bridged router) openVPN is not able to connect, however, when I connect via tethering to my mobile device hotstpo OpenVPN connects successfully.

            Are you attempting to connect while you are on the private network that has pfSense??

            That won't work if that is what you are doing, this is for when you are not home and want to access your NAS or home network.

            Are you connected to your hotspot on your laptop? And this works?

            After you test connected to your LAN and VPN to your device correct and this is when it fails?

            If this is the case, you need a rule for your LAN to route that traffic you want for your VPN too, right now it is set up for WAN VPN access..

            Example: ( I am working on a Java program at home it's huge I debug it at work and or school and I want to work on the same file so I have it saved on my NAS, I access my VPN and work on that same file remotely on the NAS)

            Make sure to upvote

            G 1 Reply Last reply Reply Quote 0
            • G
              george1116 @viragomann
              last edited by

              @viragomann Same error from the server

              Screenshot 2024-01-03 at 9.56.42 AM.png

              V JonathanLeeJ 2 Replies Last reply Reply Quote 0
              • V
                viragomann @george1116
                last edited by

                @george1116
                The client tries to connect via IPv6.
                Is this, what you intend?

                G 1 Reply Last reply Reply Quote 0
                • G
                  george1116 @JonathanLee
                  last edited by

                  @JonathanLee

                  No not at all, I just wanted to paint a picture of my setup.

                  I am attempting to connect while on my home router wifi, the LAN port from that modem-router is bridged and I have pfsense connected to the LAN port.

                  1 Reply Last reply Reply Quote 1
                  • JonathanLeeJ
                    JonathanLee @george1116
                    last edited by JonathanLee

                    @george1116 it's an IPV6 issue see it in the logs....Do you have that enabled in pfsense?

                    Change it to upd6 see if that works it was set to udp4 but upd should have set it to auto

                    Make sure to upvote

                    1 Reply Last reply Reply Quote 0
                    • G
                      george1116 @viragomann
                      last edited by george1116

                      @viragomann We changed the remote mode to udp so it makes sense that it's trying to connect with ipv6 and ipv4.

                      V JonathanLeeJ 2 Replies Last reply Reply Quote 0
                      • V
                        viragomann @george1116
                        last edited by

                        @george1116
                        The protocol has nothing to do with the IP version.
                        Is the server even configured for IPv6?

                        Just try to connect to the IPv4 to see if it makes a difference.

                        JonathanLeeJ 1 Reply Last reply Reply Quote 0
                        • JonathanLeeJ
                          JonathanLee @viragomann
                          last edited by

                          @viragomann I had him set it from udp4 to just udp to test it was not working with udp4 on the client export file

                          Make sure to upvote

                          V 1 Reply Last reply Reply Quote 0
                          • JonathanLeeJ
                            JonathanLee @george1116
                            last edited by

                            @george1116

                            Is your OpenVPN set like this?

                            f0d8db49-8cba-4730-9b39-f725ea8dd08f-image.png

                            Make sure to upvote

                            G 1 Reply Last reply Reply Quote 0
                            • V
                              viragomann @JonathanLee
                              last edited by

                              @JonathanLee
                              If the client config file only has an IPv4 remote line, it would use it, but not IPv6.

                              I guess, he has an host name in the remote line and the internal DNS resolves it to IPv6.

                              JonathanLeeJ G 2 Replies Last reply Reply Quote 1
                              • G
                                george1116 @JonathanLee
                                last edited by george1116

                                @JonathanLee

                                I changed it from that to this

                                <br/>
                                Screenshot 2024-01-03 at 10.12.12 AM.png

                                JonathanLeeJ 1 Reply Last reply Reply Quote 0
                                • JonathanLeeJ
                                  JonathanLee @viragomann
                                  last edited by

                                  @viragomann He could create a host override for it right?

                                  Make sure to upvote

                                  V 1 Reply Last reply Reply Quote 0
                                  • JonathanLeeJ
                                    JonathanLee @george1116
                                    last edited by

                                    @george1116 is your wan have ipv6 listed under status in pfsense?

                                    I am thinking set that to ipv4 only and test again

                                    Make sure to upvote

                                    1 Reply Last reply Reply Quote 0
                                    • V
                                      viragomann @JonathanLee
                                      last edited by

                                      @JonathanLee said in OpenVPN does not work on bridged PFsense router:

                                      @viragomann He could create a host override for it right?

                                      I guess, his DNS resolves the host to an IPv6 as mentioned. Presumably due to DHCPv6 DNS registration.
                                      I don't think that a host override would be a solution here.

                                      JonathanLeeJ 1 Reply Last reply Reply Quote 0
                                      • JonathanLeeJ
                                        JonathanLee @viragomann
                                        last edited by

                                        @viragomann I wonder if his WAN IP he is connecting to is IPV4, I wonder if that interface shows IPV4 only he said he has a router before pfSense and not pfSense first, so I think pfSense is getting ipv4 only on the wan interface

                                        Make sure to upvote

                                        1 Reply Last reply Reply Quote 0
                                        • G
                                          george1116 @viragomann
                                          last edited by george1116

                                          @viragomann Screenshot 2024-01-03 at 10.22.19 AM.png

                                          After changing it back this is all I get.

                                          @JonathanLee You mean it shows IPV4 but it really isn't?

                                          JonathanLeeJ V 2 Replies Last reply Reply Quote 1
                                          • JonathanLeeJ
                                            JonathanLee @george1116
                                            last edited by

                                            @george1116 did you use the Wizard or manually set up OpenVPN in pfsense?

                                            Make sure to upvote

                                            G 1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.