Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    What i am doing wrong here?

    Scheduled Pinned Locked Moved OpenVPN
    23 Posts 3 Posters 4.3k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • chpalmerC
      chpalmer
      last edited by

      Your pfSense box WAN= 192.168.1.68  ?

      Your pfSense box LAN= 192.168.10.1  ?

      If so then get rid of the port forward rules you show above.

      Get rid of WAN rules going to 192.168.1.68  the first rule to "WAN Address" already does it for you.

      on OpenVPN firewall tab make rule destination to LAN Subnet.

      Triggering snowflakes one by one..
      Intel(R) Core(TM) i5-4590T CPU @ 2.00GHz on an M400 WG box.

      1 Reply Last reply Reply Quote 0
      • johnpozJ
        johnpoz LAYER 8 Global Moderator
        last edited by

        Yeah those port forwards are pointless..  And could be breaking it..  Those sure were not put in by the wizard..  Like I said setting up openvpn is clickity clickity on the wizard and your up and running.

        An intelligent man is sometimes forced to be drunk to spend time with his fools
        If you get confused: Listen to the Music Play
        Please don't Chat/PM me for help, unless mod related
        SG-4860 24.11 | Lab VMs 2.8, 24.11

        1 Reply Last reply Reply Quote 0
        • L
          ll_hellBoy_ll
          last edited by

          hi. sorry for my late replay. as i am testing setup a lot so my ip address also changing. here is what i have now

          My my modem lan ip - 192.168.1.1

          my pfsense lan ip - 192.168.10.1

          and my pfsense wan ip - 192.168.1.80

          here are my all latest rules

          no port forward rules atm

          wanrules.jpg
          wanrules.jpg_thumb
          openvpn.jpg
          openvpn.jpg_thumb
          natoutbound.jpg
          natoutbound.jpg_thumb
          ipsec.jpg
          ipsec.jpg_thumb

          1 Reply Last reply Reply Quote 0
          • johnpozJ
            johnpoz LAYER 8 Global Moderator
            last edited by

            So you didn't open up remote for me.. So how would I get in??  I did a scan of that IP you sent me and comes back with no ports open..

            If you want me to take a look you have to allow port your webgui is listening on? 80, 443?  Why don't you allow ping to we can test if your IP even answers ping..

            I would guess your router in front of pfsense is not set to put your pfsense wan IP in dmz… Or that feature is not working.

            An intelligent man is sometimes forced to be drunk to spend time with his fools
            If you get confused: Listen to the Music Play
            Please don't Chat/PM me for help, unless mod related
            SG-4860 24.11 | Lab VMs 2.8, 24.11

            1 Reply Last reply Reply Quote 0
            • L
              ll_hellBoy_ll
              last edited by

              Already did that for you

              1 Reply Last reply Reply Quote 0
              • L
                ll_hellBoy_ll
                last edited by

                hi. back again. i found the problem. it was my modem firewall which was blocking my openvpn. now i can connect to my vpn. but why my ip not changing?

                my openvpn server on my 2nd net connection. but when i connect from my 1st connection. the IP address remain same?

                please tell me what i need to do now…thnx a lot

                1 Reply Last reply Reply Quote 0
                • johnpozJ
                  johnpoz LAYER 8 Global Moderator
                  last edited by

                  dude your IP still does not ping, nor does it allow me login to the gui.

                  Thought you said you put pfsense in your dmz of your "modem"..

                  An intelligent man is sometimes forced to be drunk to spend time with his fools
                  If you get confused: Listen to the Music Play
                  Please don't Chat/PM me for help, unless mod related
                  SG-4860 24.11 | Lab VMs 2.8, 24.11

                  1 Reply Last reply Reply Quote 0
                  • L
                    ll_hellBoy_ll
                    last edited by

                    hi. back again. sorry i told you before i am testing a lot. so this is not my main server. when i am on only that time i open my pfsense(openvpn server). also my problem was my modem(router) which was blocking my server. i have changed my modem now all ok for me. but i have little problem. i cant login more than 1 user at a time. i made 3 user account and i can login all 3 but not same time. please let me know how to solve this problem. thanks a lot. Marry Christmas

                    1 Reply Last reply Reply Quote 0
                    • chpalmerC
                      chpalmer
                      last edited by

                      Are you able to bridge your modem so that your pfSense box gets a public IP address?  Sure would make things easier on you.

                      Triggering snowflakes one by one..
                      Intel(R) Core(TM) i5-4590T CPU @ 2.00GHz on an M400 WG box.

                      1 Reply Last reply Reply Quote 0
                      • L
                        ll_hellBoy_ll
                        last edited by

                        hi. yes my modem is in bridge mode and my pfsense getting the public ip address. openvpn also working. just i cant login all my 3 account at same time. but i can login 1 at a time. what i have to do for this problem. thank you

                        1 Reply Last reply Reply Quote 0
                        • johnpozJ
                          johnpoz LAYER 8 Global Moderator
                          last edited by

                          change you the number of concurrent connections.

                          Are you using the same user/certs or do you have 3 different ones?

                          concurusers.png
                          concurusers.png_thumb

                          An intelligent man is sometimes forced to be drunk to spend time with his fools
                          If you get confused: Listen to the Music Play
                          Please don't Chat/PM me for help, unless mod related
                          SG-4860 24.11 | Lab VMs 2.8, 24.11

                          1 Reply Last reply Reply Quote 0
                          • L
                            ll_hellBoy_ll
                            last edited by

                            hi. sorry for late replay. yes i put 6 where you putted 2. and yes 3 different user but same CA. is it ok?

                            1 Reply Last reply Reply Quote 0
                            • johnpozJ
                              johnpoz LAYER 8 Global Moderator
                              last edited by

                              whatever number you want is ok..  They could all be same cert/user if you wanted, etc.  That is up to you.

                              An intelligent man is sometimes forced to be drunk to spend time with his fools
                              If you get confused: Listen to the Music Play
                              Please don't Chat/PM me for help, unless mod related
                              SG-4860 24.11 | Lab VMs 2.8, 24.11

                              1 Reply Last reply Reply Quote 0
                              • L
                                ll_hellBoy_ll
                                last edited by

                                hi. then why i cant login all 3 same time? i can login only 1 at a time. please let me know what to do…thank you

                                1 Reply Last reply Reply Quote 0
                                • johnpozJ
                                  johnpoz LAYER 8 Global Moderator
                                  last edited by

                                  dude I have NO freaking idea what your doing wrong, since you have provided NOTHING in the way of information… What does the log say on both the server and the client when your saying it doesn't log in?

                                  An intelligent man is sometimes forced to be drunk to spend time with his fools
                                  If you get confused: Listen to the Music Play
                                  Please don't Chat/PM me for help, unless mod related
                                  SG-4860 24.11 | Lab VMs 2.8, 24.11

                                  1 Reply Last reply Reply Quote 0
                                  • First post
                                    Last post
                                  Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.