Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    New OpenVPN setup for road-warriors - connected but no routing

    Scheduled Pinned Locked Moved OpenVPN
    55 Posts 8 Posters 20.5k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • K
      kejianshi
      last edited by

      Did you try shooting it with a 12 gauge shotgun?  (Teasing)

      Thats odd.  I've never seen anything like that before.  It should allow you to configure remote access.  Thats very basic.

      I wonder…  Do you have user accounts and certs set up on your pfsense other than Admin?  Because you need too.  It required.

      If pfsense thinks there are no users and no user certs it might not present you remote access options.

      I had assumed these road warriors of yours had limited user accounts installed on pfsense.

      You can get away with creating just 1 user and one user cert and allowing multiple concurrent connections by that user, but its better to set up one user account per "road warrior".  You just go into system > user manager and add users, passwords and user certs.

      Then you might have much better luck.

      1 Reply Last reply Reply Quote 0
      • C
        Cylindric
        last edited by

        I do have a user I set up that I've been using for testing, and that's the one I've been using in the OpenVPN client downloader

        user.png
        user.png_thumb

        1 Reply Last reply Reply Quote 0
        • C
          Cylindric
          last edited by

          Hang on, do I even need the "client" tab on the OpenVPN config? Going to try a manual approach as per: http://forum.pfsense.org/index.php?topic=22115.0

          1 Reply Last reply Reply Quote 0
          • C
            Cylindric
            last edited by

            Getting the shotgun ready now. Just recreated everything manually, and no difference. VPN client connects fine, lights go green, routes are created, but nothing is passed.

            1 Reply Last reply Reply Quote 0
            • K
              kejianshi
              last edited by

              When you want to connect a windows machine to a pfsense for the purposes of tunneling, its a server client relationship.  Not peer to peer.  I think just a straight up simple TUN tunnel is the way and those are made with wizard.

              1 Reply Last reply Reply Quote 0
              • C
                Cylindric
                last edited by

                TUN is what I've been trying :(

                I'm going to try it on a different remote computer, in case it's something wonky installed on my PC. Hopefully that's it, although it'll be annoying :)

                1 Reply Last reply Reply Quote 0
                • K
                  kejianshi
                  last edited by

                  I don't think thats it.  While you arwe doing that, I'm going to get some coffee and try to find why you are not getting anything other than "peer" as options.  Because thats not right.  Not on pfsense 2.03 for sure.

                  1 Reply Last reply Reply Quote 0
                  • C
                    Cylindric
                    last edited by

                    Gah, just installed the Android client on my phone and it seemed to work right off the bat. Going to try a different remote machine.

                    1 Reply Last reply Reply Quote 0
                    • K
                      kejianshi
                      last edited by

                      hahahahahahahahahahahahah….  DAMN WINDOWS!!!!!!!

                      (Still doesn't explain your limited tunnel options to me)

                      1 Reply Last reply Reply Quote 0
                      • C
                        Cylindric
                        last edited by

                        Okay, so works on my Android phone and an Ubuntu VM I just spun up, but not on either of my Windows 8 computers. Guess there's something with the OpenVPN client on Windows 8…

                        1 Reply Last reply Reply Quote 0
                        • K
                          kejianshi
                          last edited by

                          Windows 8 firewalls?
                          Was the install ran as admin?

                          Beyond that, I cant even imagine what.

                          1 Reply Last reply Reply Quote 0
                          • C
                            Cylindric
                            last edited by

                            Well I'll be… Once I worked out it's a Windows 8 + OpenVPN problem, I had something to Google, and came upon this post by Luis Silva.

                            You have to start the Network Connections service, which is normally set to "Manual", and only runs when the "network connections" dialog is open. Start that service, and the VPN client works!!

                            1 Reply Last reply Reply Quote 0
                            • K
                              kejianshi
                              last edited by

                              Thank you for helping me with this problem.  I have learned something useful…

                              (True statement - Although, wasn't it supposed to be the other way around!)

                              Windows 8myopenvpn....

                              1 Reply Last reply Reply Quote 0
                              • K
                                kejianshi
                                last edited by

                                I'd suggest a new thread on Windows 8myopenvpn….  actually.

                                1 Reply Last reply Reply Quote 0
                                • D
                                  doktornotor Banned
                                  last edited by

                                  @Cylindric:

                                  You have to start the Network Connections service, which is normally set to "Manual", and only runs when the "network connections" dialog is open. Start that service, and the VPN client works!!

                                  You know, having huge blinking tiles everywhere is so much more important than network connectivity…

                                  1 Reply Last reply Reply Quote 0
                                  • C
                                    Cylindric
                                    last edited by

                                    @kejianshi:

                                    I'd suggest a new thread on Windows 8myopenvpn….  actually.

                                    You mean here? I'm happy to write a quick post specifically for Windows 8 to help people find this info :)

                                    1 Reply Last reply Reply Quote 0
                                    • K
                                      kejianshi
                                      last edited by

                                      Windows 8 looks like something designed for either the vision impaired or for exclusive use of kindergarteners or both.

                                      But yeah, I suspect this solution will be something lots of people who moved beyond windows 7 will need to know.

                                      1 Reply Last reply Reply Quote 0
                                      • K
                                        kejianshi
                                        last edited by

                                        I think you should white it up and maybe it will get "stickied" if something like it doesn't already exist or a fix isn't already in the works.
                                        I don't use windows 8 or 7 or Vista…  Or ME or...  But I digress.

                                        1 Reply Last reply Reply Quote 0
                                        • H
                                          hbtousa
                                          last edited by

                                          @Cylindric:

                                          Gah, just installed the Android client on my phone and it seemed to work right off the bat. Going to try a different remote machine.

                                          What app and settings were used for it to make it work ? Do you mind sharing  the pfsense rules that allow traffic to cross through the VPN? I've been reading your very good troubleshooting logic and I believe I am almost there. Thanks

                                          1 Reply Last reply Reply Quote 0
                                          • Z
                                            Zachzaf
                                            last edited by

                                            Not to beat a dead horse, but has anyone run into this with windows 7? I have three machines that I am trying to Use and all are getting this same thing… Network connections are started on all...

                                            It's the exact same symptoms though, connection just fine, but once connected I can only ping out tot he firewall. No network access.

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.