Open VPN connection to secondary interface on pfsense box.
-
I am using embedded 1.2.
It is a basic client-server connection.
I am able to connect to the primary interface just fine, however when I attempt to move it to our secondary interface(it has a much higher upstream) it fails with this error from the open vpn server log. As far as I can tell I have both firewall rules the same as it is definitely making the connection. I have even used the same FW rule and just changed the interface from the primary to the secondary to confirm this.Jul 9 12:28:47 openvpn[8578]: xxx.xxx.xxx.xxx:xxxxx TLS Error: TLS handshake failed
Jul 9 12:28:47 openvpn[8578]: xxx.xxx.xxx.xxx:xxxxx TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Jul 9 12:28:43 openvpn[8578]: xxx.xxx.xxx.xxx:xxxxx TLS Error: TLS handshake failed
Jul 9 12:28:43 openvpn[8578]: xxx.xxx.xxx.xxx:xxxxx TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Jul 9 12:28:05 openvpn[8578]: xxx.xxx.xxx.xxx:xxxxx TLS Error: TLS handshake failed
Jul 9 12:28:05 openvpn[8578]: xxx.xxx.xxx.xxx:xxxxx TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)$ netstat -an | grep 1194 results this, but we just cant get it to go through. Is there a way to bind it to a specific interface? Or maybe it is a gateway issue?
udp4 0 0 *.1194 .If anyone has any ideas, it would be much appreciated.
Thanks,
John
-
Just replying with what fixed it. It was as simple as adding "local 2ndexternalipaddress" as a custom option.