Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    First Timer Dabbling in VPN * Recommendations

    OpenVPN
    4
    24
    4.4k
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • J
      Jbmeth007
      last edited by

      ok I got it to connect, and its working via cell.  but it doesn't see anything on my network.. only loads webpages.. i'm sure its my tunneling settings.

      What should i put in place if im trying to get on my local VLAN.

      1 Reply Last reply Reply Quote 0
      • K
        kejianshi
        last edited by

        Did you set up a site to site or are you using "Wizard" to set up the VPN and then exporting client configs to something like a windows laptop?

        (Viscosity = MAC)  But did you use wizard?  Are you using client export package?  Are you forcing all traffic across the VPN?

        Also, about all that 192.168.x.x stuff, what is the IP of your pfsense LAN?  The IP of the LAN your MAC (I guess) is sitting on?

        1 Reply Last reply Reply Quote 0
        • J
          Jbmeth007
          last edited by

          My Local VLAN is 192.168.1.1 DHCP enabled from .50-.200   opp, forgot yes. used wizard.  and client export for keys

          it connects and gives me the ip i set in the tunner whatever the e.g. was.  10.0.8.x something or a nother.. but doesn't see anything on 192.168.1.1  should i set the vpn tunnel to something like an address that isn't dhcp handled but in the same subnet?

          1 Reply Last reply Reply Quote 0
          • K
            kejianshi
            last edited by

            So, you have 192.168.1.1 in use on your network and its also in use on like half the networks on the planet.  (Half is probably an understatement).

            So, thats not good.  I'd change your network IP addresses.

            1 Reply Last reply Reply Quote 0
            • J
              Jbmeth007
              last edited by

              ok no problem.  saw that Force all client generated traffic through tunnel.  I should enable this yes?

              1 Reply Last reply Reply Quote 0
              • K
                kejianshi
                last edited by

                Yes - If you want to VPN everything…  Most of the time, yes.

                1 Reply Last reply Reply Quote 0
                • J
                  Jbmeth007
                  last edited by

                  Thanks for all your Help.  its working.. Your awesome..   Now i can brew my coffee from work,  oh and apparently tie my show laces as well

                  1 Reply Last reply Reply Quote 0
                  • K
                    kejianshi
                    last edited by

                    I hear they have an IP waiting for every ounce of matter on earth…  No way possible to burn through all those addresses.

                    I imagine the settlers of the USA felt the same way about the trees here when they arrived, and yet...

                    Nano-machines will need IPs.  We will find some way to exhaust them.  Thats what we are best at.  Using stuff up.  :-\

                    1 Reply Last reply Reply Quote 0
                    • J
                      Jbmeth007
                      last edited by

                      isn't that what ipv6 is for. or are you including that in all 20oz.  which by the way is broken for me at the moment.  rtt  gets worse and worse the longer i leave it connected.

                      1 Reply Last reply Reply Quote 0
                      • K
                        kejianshi
                        last edited by

                        Just lost me…  RTT to what?

                        (Yeah - I was talking IPV6)

                        1 Reply Last reply Reply Quote 0
                        • J
                          Jbmeth007
                          last edited by

                          RTT to my ISP WAN address

                          status_rrd_graph_img.png
                          status_rrd_graph_img.png_thumb

                          1 Reply Last reply Reply Quote 0
                          • K
                            kejianshi
                            last edited by

                            I've seen worse…  I've seen better.
                            What are you thinking?

                            1 Reply Last reply Reply Quote 0
                            • J
                              Jbmeth007
                              last edited by

                              i'm not sure, i thought id give ipv6 a shot see what the hype is about since the modem supports it.  didn't like the result.

                              1 Reply Last reply Reply Quote 0
                              • K
                                kejianshi
                                last edited by

                                Ohhhhh - Thats not an inherent problem of IPV6.  Thats probably a setting, a bug or some issue with ISP or something.  For me, the hype about IPV6 is being able to get a huge big bundle of public addresses for my servers without paying a bunch of money extra for each IP.  (This is probably part of the reason IPV6 isn't already everywhere - Its easier to sell water for high prices in a desert)

                                1 Reply Last reply Reply Quote 0
                                • jimpJ
                                  jimp Rebel Alliance Developer Netgate
                                  last edited by

                                  If you're on 2.1, that RRD quality graph issue is probably from a bug we're working on in apinger, not your actual latency to the ISP

                                  Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

                                  Need help fast? Netgate Global Support!

                                  Do not Chat/PM for help!

                                  1 Reply Last reply Reply Quote 0
                                  • K
                                    kejianshi
                                    last edited by

                                    I figured…  To check would be as simple as pinging the gateway manually...

                                    1 Reply Last reply Reply Quote 0
                                    • J
                                      Jbmeth007
                                      last edited by

                                      Ok, I figured it was something like that,  I've read somewhere about a bug causing this.  but being torn from project to project to work and project, and kids, and project.  hunger, sleep.  I forget what i read or did 5 mins ago.  I even forgot what I was trying to say in this post.

                                      1 Reply Last reply Reply Quote 0
                                      • First post
                                        Last post
                                      Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.