Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    OpenVPN All Traffic Routing

    Scheduled Pinned Locked Moved OpenVPN
    7 Posts 2 Posters 9.0k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • S
      serialdie
      last edited by

      I have been searching the forum and I have not found a clear answer.

      I am trying to get all my openvpn clients to pass threw all traffic threw the openvpn server.

      What do I need to do?

      All clients are connected right now but all of the internet traffic goes threw there local LAN and out to there ISP.

      I put in custom options push "redirect-gateway def1" and all of there internet stops…. they can ping the openvpn router but they can not browse the internet.

      I am using pfsense as the openvpn server.

      Any Ideas?

      TIA!

      1 Reply Last reply Reply Quote 0
      • S
        serialdie
        last edited by

        Ok so now I have

        push "route 10.30.2.0/255.255.255.0";push "redirect-gateway def1";push "dhcp-option DNS 10.30.2.1"

        And still the client is unable to get out to the internet.
        We can ping each other back and forward but the client does not have internet access.

        Any ideas please?

        I do have under Outbound NAT the following:

        Interface	Source	Source Port	Destination	Destination Port	NAT Address	NAT Port	Static Port	Description	
        
        WAN  	 10.30.5.0/32	 *	                      *	                      *	                          *	          *	             NO
        
        1 Reply Last reply Reply Quote 0
        • jimpJ
          jimp Rebel Alliance Developer Netgate
          last edited by

          This is probably because they aren't getting NAT applied.

          Enable manual/advanced outbound NAT. Add an outbound NAT rule like the one for LAN that will match the subnet of your VPN clients.

          Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

          Need help fast? Netgate Global Support!

          Do not Chat/PM for help!

          1 Reply Last reply Reply Quote 0
          • S
            serialdie
            last edited by

            jimp,

            As all ways thanks for your help!

            So it should look like this?

            1 Reply Last reply Reply Quote 0
            • jimpJ
              jimp Rebel Alliance Developer Netgate
              last edited by

              The part of the screen I'd need to see is too small to make out for sure, but if that second rule is your VPN client subnet it should be OK.

              Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

              Need help fast? Netgate Global Support!

              Do not Chat/PM for help!

              1 Reply Last reply Reply Quote 0
              • S
                serialdie
                last edited by

                OK I am going to give it a try.

                Thank You!

                1 Reply Last reply Reply Quote 0
                • S
                  serialdie
                  last edited by

                  Thanks it worked!

                  1 Reply Last reply Reply Quote 0
                  • First post
                    Last post
                  Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.