Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    LAN to LAN between pfSense<>Zeroshell

    Scheduled Pinned Locked Moved OpenVPN
    1 Posts 1 Posters 2.4k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • D
      drummer
      last edited by

      Hi all,
      i am facing an issue with the openvpn configuration, i was interested if you could help. I have multiple sites connected with zeroshell, but now i would like to connect pfSense`s openvpn to zeroshell. Zeroshell should work as server, here is my error report:
      on Zeroshell (server):
      TCP NOTE: Rejected connection attempt from xxx.xxx.xxx.xxx:xxxx due to –remote setting

      On pfSense (client):
      Status: reconnecting; ping-restart

      openvpn[43466]: Attempting to establish TCP connection with [AF_INET]xxxxxxxx:1199 [nonblock] 
      openvpn[43466]: TCP connection established with [AF_INET]xxxxxxxx:1199 
      openvpn[43466]: TCPv4_CLIENT link local (bound): [AF_INET]yyyyyyyy 
      openvpn[43466]: TCPv4_CLIENT link remote: [AF_INET]xxxxxxxx:1199 
      openvpn[43466]: [UNDEF] Inactivity timeout (--ping-restart), restarting 
      openvpn[43466]: TCP/UDP: Closing socket 
      openvpn[43466]: SIGUSR1[soft,ping-restart] received, process restarting 
      openvpn[43466]: Restart pause, 5 second(s)
      
      

      And here is the config file from both:

      Openvpn server (zeroshell):
      Remote Host: aaaaa
      Port: 1199 TCP
      Role: server
      Encryption: ON
      Gateway:…....
      X.509 Host certificate: Imported

      Interface configured as: 192.168.7.1

      Client (pfSense):

      dev ovpnc1 
      dev-type tap 
      dev-node /dev/tap1 
      writepid /var/run/openvpn_client1.pid 
      #user nobody 
      #group nobody 
      script-security 3 
      daemon 
      keepalive 10 60 
      ping-timer-rem 
      persist-tun 
      persist-key 
      proto tcp-client 
      cipher AES-128-CBC 
      up /usr/local/sbin/ovpn-linkup 
      down /usr/local/sbin/ovpn-linkdown 
      local yyy.yyy.yyy.yyy 
      tls-client 
      client 
      lport 0 
      management /var/etc/openvpn/client1.sock unix 
      remote xxx.xxx.xxx.xxx 1199 
      ifconfig 192.168.7.2 192.168.7.1 
      route 192.168.110.0 255.255.255.0 
      ca /var/etc/openvpn/client1.ca 
      cert /var/etc/openvpn/client1.cert 
      key /var/etc/openvpn/client1.key 
      float 
      verb 3
      

      Thanks.

      Kind regards
      drummer

      1 Reply Last reply Reply Quote 0
      • First post
        Last post
      Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.