Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Concurrent sessions won't work..

    Scheduled Pinned Locked Moved OpenVPN
    5 Posts 2 Posters 1.8k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • V
      vernooij
      last edited by

      Hi,

      I currently use pfSense as a OpenVPN server in my network with a single NIC on a ESXI server. But I have a problem:

      Everything works fine, copied all the certs etc to the config folders and I'm able to connect from every notebook/pc to the VPN server, until I try to connect 2 computers at the same time (with different users). The concurrent connections setting is set to 10, so should be more then enough..

      the error: TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
      I already googled for this error, but all the ports are correctly forwarded…

      I followed a dummy roadwarrior tutorial to set up CA, servercert and 5 client certs, and ofcourse the server.

      Has anyone a idea to solve this problem?

      Thanks!

      1 Reply Last reply Reply Quote 0
      • R
        root2020
        last edited by

        FYI - All client certs need to have a unique "common name"

        1 Reply Last reply Reply Quote 0
        • V
          vernooij
          last edited by

          Thanks for your reply :)

          Yes they have, ive got 5 keys, 5 certs, a pem and a CA. I thought this was right..??

          1 Reply Last reply Reply Quote 0
          • R
            root2020
            last edited by

            Run through this document. Once you get the hang of it you will be able to create working road-warrior VPN's from point to point in under 5 mins. You do not have to use the vpn wizard.
            http://blog.stefcho.eu/?p=492

            Notes.
            -Most people use the pfsense gui to create certs and keys now, instead of the easy-rsa. Like I say you can do all this start to finish working VPN from the ground up in less than 5min this way.
            -Client Exporter saves a ton of time, use it.

            1 Reply Last reply Reply Quote 0
            • V
              vernooij
              last edited by

              Thank you, i'll try that:)

              It works! thank you!:)

              1 Reply Last reply Reply Quote 0
              • First post
                Last post
              Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.