Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    How to create an OpenVPN client to IPVanish (updated & working)

    Scheduled Pinned Locked Moved OpenVPN
    21 Posts 12 Posters 21.4k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • P
      phathat
      last edited by

      Thanks brother very helpful
      ;) I had to add an outbound NAT on interface OpenVPN - Source = LAN network range - Dest = * - Dest P = * - NAT Address = "OpenVPN Address" - NAT P = * - Static port = no
      To get this to work.

      1 Reply Last reply Reply Quote 0
      • G
        g146m026
        last edited by

        Awesome step by step,

        Have you make the tutorial for the selective routing steps ?

        I'm very lookin for this kind of configuration.

        Can you redirect me somewhere ?

        Thanks you!

        1 Reply Last reply Reply Quote 0
        • W
          whitejoy
          last edited by

          you can find some help here

          bestvpnproviders.net
          www.anywhere.fm

          good luck and I hope I could help

          1 Reply Last reply Reply Quote 0
          • DerelictD
            Derelict LAYER 8 Netgate
            last edited by

            2.2 has username and password in the GUI so the auth file is not required any more, I think.  Works for me on VPNBook, at least.

            Chattanooga, Tennessee, USA
            A comprehensive network diagram is worth 10,000 words and 15 conference calls.
            DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
            Do Not Chat For Help! NO_WAN_EGRESS(TM)

            1 Reply Last reply Reply Quote 0
            • N
              notaduck
              last edited by

              i tried to follow the guide but found a fail.
              every time i tried to insert this```
              fast-io;tun-mtu 1500;persist-key;persist-tun;persist-remote-ip;auth-user-pass /conf/ipvanish.auth;verb 3;auth SHA256;keysize 256;tls-cipher DHE-RSA-AES256-SHA:DHE-DSS-AES256-SHA:AES256-SHA;

              
              but iw works without it
              1 Reply Last reply Reply Quote 0
              • SLIMaxPowerS
                SLIMaxPower
                last edited by

                using 2.2.1 and interfaces assign doesn't have any dropdowns/or add to add the opt1 interface.

                what do i do ?

                1 Reply Last reply Reply Quote 0
                • DerelictD
                  Derelict LAYER 8 Netgate
                  last edited by

                  If there are no unassigned interfaces there is no add button.

                  Chattanooga, Tennessee, USA
                  A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                  DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                  Do Not Chat For Help! NO_WAN_EGRESS(TM)

                  1 Reply Last reply Reply Quote 0
                  • P
                    prius
                    last edited by

                    Hi

                    Same problem here. ovpnc1 is not available in the dropdown list.

                    Any idea ?

                    Thanks !

                    1 Reply Last reply Reply Quote 0
                    • P
                      prius
                      last edited by

                      Solved !

                      You have to create the openvpn client BEFORE creating the OPT1 interface.

                      1 Reply Last reply Reply Quote 0
                      • W
                        willieaames
                        last edited by

                        so i got it to work but when i go and check my ipvanish ip on my browser it's still the same?

                        1 Reply Last reply Reply Quote 0
                        • L
                          lar
                          last edited by

                          I don't have an add button on mine under interfaces/assign
                          can someone help me out please?

                          1 Reply Last reply Reply Quote 0
                          • DerelictD
                            Derelict LAYER 8 Netgate
                            last edited by

                            If you do not have any unassigned interfaces there is no add button presented. Create your OpenVPN client instance first.

                            Chattanooga, Tennessee, USA
                            A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                            DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                            Do Not Chat For Help! NO_WAN_EGRESS(TM)

                            1 Reply Last reply Reply Quote 0
                            • F
                              fauxfaust
                              last edited by

                              Agreed. I did this in the altered order suggested and it worked - although the auto-created rules didn't get made in the Firewall:NAT:Outbound section. I created them myself though (as close to the examples in the post as possible) and everything appears to be working.

                              Also did a test through www.ipleak.net to see if it was leaking dns - no dns leak either. Pretty impressed!
                              I'd previously tried a number of other devices for this kind of setup and none worked exactly right (or none of them had write ups/openvpn capable). This one is working exactly as expected and took me all of 20 mins max to get installed AND configured.

                              1 Reply Last reply Reply Quote 0
                              • F
                                fauxfaust
                                last edited by

                                Ack…spoke to soon. Worked fine for a month or so...now completely  not functional.

                                Nothing changed, although for some reason the openvpn service went down and now (although restarted) won't get an IP address from the ipvanish server side.

                                Anyone have any ideas on a fix?

                                1 Reply Last reply Reply Quote 0
                                • DerelictD
                                  Derelict LAYER 8 Netgate
                                  last edited by

                                  Sounds like a problem with IPvanish. Have you called them?

                                  Chattanooga, Tennessee, USA
                                  A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                                  DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                                  Do Not Chat For Help! NO_WAN_EGRESS(TM)

                                  1 Reply Last reply Reply Quote 0
                                  • F
                                    fauxfaust
                                    last edited by

                                    No not yet. Thinking it's something specific to the config/settings and might just reset them first and try again.

                                    1 Reply Last reply Reply Quote 0
                                    • F
                                      fauxfaust
                                      last edited by

                                      Hmm…may be. Getting the following in the status for openvpn

                                      ![vpn down.JPG](/public/imported_attachments/1/vpn down.JPG)
                                      ![vpn down.JPG_thumb](/public/imported_attachments/1/vpn down.JPG_thumb)

                                      1 Reply Last reply Reply Quote 0
                                      • F
                                        fauxfaust
                                        last edited by

                                        Ok, following what was in this thread, but without ssh or other checks - shutdown the whole machine (previously rebooted).

                                        Modified the /conf/ipvanish.auth file with updated credentials.

                                        Restarted Openvpn services. 2 Services wouldn't start automatically (NTP and one other I can't remember) - started them manually. Connection started working after this.

                                        I'll keep monitoring. Considering it's been running for a while (about a month or more) without a complete shutdown, this could be something that needs scheduling in.

                                        1 Reply Last reply Reply Quote 0
                                        • DerelictD
                                          Derelict LAYER 8 Netgate
                                          last edited by

                                          Your walk through is old. You don't need an auth file any more. There's a place for username and password in the pfSense gui now.

                                          Chattanooga, Tennessee, USA
                                          A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                                          DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                                          Do Not Chat For Help! NO_WAN_EGRESS(TM)

                                          1 Reply Last reply Reply Quote 0
                                          • G
                                            gertty
                                            last edited by

                                            Would a CPU with AES-NI instructions help with this configuration?

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.