Update Tunnel Connected

DenverDesktopsSupport

I am now able to connect to the VPN tunnel successfuly, but my WAN IP still reflects my ISP WAN IP.

viragomann

@DenverDesktopsSupport
So you have to route traffic over the VPN.
You can either configure the OpenVPN client to route all upstream traffic over the VPN, or in case you only want to direct certain traffic (certain source IPs or destination IPs), you can do policy-routing.

DenverDesktopsSupport

@viragomann Thanks. I want to start with all traffic and then possibly limit. Nord seems to be connecting to the tunnel but continues to drop. Not a reliable solution at this point. Reached out to Nord, but who knows what they will say.

Gertjan

@DenverDesktopsSupport said in Update Tunnel Connected:

... but who knows what they will say.

Apply this universal law first : you get what you pay for.
The advise they probably tell you : we support our application (on your phone, PC, etc) as that one, they made, control, and know all about.
When you use your own application on your side, like the VPN client build into pfSense, they (normally, hope to be wrong of course) won't help you, as this application offers thousands of settings, and runs on a system (pfSense) they can't support / don't know anything about.

If your lucky, you can find info like this : Go here and Jump to "3. Route WAN through the VPN tunnel".

Btw I'm : nothing saying that Exp*ssVPN is any better. Several users keep this instruction page 'up to date' as the question was asked a lot.

DenverDesktopsSupport

@Gertjan I would agree, all of these services focus on desktop and mobile apps that work fairly well. PFsense is in the minority and probably is a very small % of the overall customer base.

Nord has great documentation - https://support.nordvpn.com/hc/en-us/articles/20382523899281-pfSense-2-5-Setup-with-NordVPN

But poor response. Ticket opened Monday and still no response.

Gertjan

@DenverDesktopsSupport said in Update Tunnel Connected:

99281-pfSense-2-5-Setup-with-NordVPN

Using pfSense 2.5 today is already a huge security issue, and probably impossible as the OpenVPN client from back then will not connect to the Nord OpenVPN server anyway.

The pfSense OpenVPN Client GUI page also changed ...

The documentation does mention the creation of a policy routing so all outgoing traffic goes over the NordVPN connection.
After all, when a VPN connection is created, pfSense suddenly has two outgoing network interfaces so it might be necessary to inform pfSense what traffic needs to use what interface : WAN or VPN ....