Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    What i am doing wrong here?

    Scheduled Pinned Locked Moved OpenVPN
    23 Posts 3 Posters 4.3k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • johnpozJ
      johnpoz LAYER 8 Global Moderator
      last edited by

      Yeah those port forwards are pointless..  And could be breaking it..  Those sure were not put in by the wizard..  Like I said setting up openvpn is clickity clickity on the wizard and your up and running.

      An intelligent man is sometimes forced to be drunk to spend time with his fools
      If you get confused: Listen to the Music Play
      Please don't Chat/PM me for help, unless mod related
      SG-4860 24.11 | Lab VMs 2.8, 24.11

      1 Reply Last reply Reply Quote 0
      • L
        ll_hellBoy_ll
        last edited by

        hi. sorry for my late replay. as i am testing setup a lot so my ip address also changing. here is what i have now

        My my modem lan ip - 192.168.1.1

        my pfsense lan ip - 192.168.10.1

        and my pfsense wan ip - 192.168.1.80

        here are my all latest rules

        no port forward rules atm

        wanrules.jpg
        wanrules.jpg_thumb
        openvpn.jpg
        openvpn.jpg_thumb
        natoutbound.jpg
        natoutbound.jpg_thumb
        ipsec.jpg
        ipsec.jpg_thumb

        1 Reply Last reply Reply Quote 0
        • johnpozJ
          johnpoz LAYER 8 Global Moderator
          last edited by

          So you didn't open up remote for me.. So how would I get in??  I did a scan of that IP you sent me and comes back with no ports open..

          If you want me to take a look you have to allow port your webgui is listening on? 80, 443?  Why don't you allow ping to we can test if your IP even answers ping..

          I would guess your router in front of pfsense is not set to put your pfsense wan IP in dmz… Or that feature is not working.

          An intelligent man is sometimes forced to be drunk to spend time with his fools
          If you get confused: Listen to the Music Play
          Please don't Chat/PM me for help, unless mod related
          SG-4860 24.11 | Lab VMs 2.8, 24.11

          1 Reply Last reply Reply Quote 0
          • L
            ll_hellBoy_ll
            last edited by

            Already did that for you

            1 Reply Last reply Reply Quote 0
            • L
              ll_hellBoy_ll
              last edited by

              hi. back again. i found the problem. it was my modem firewall which was blocking my openvpn. now i can connect to my vpn. but why my ip not changing?

              my openvpn server on my 2nd net connection. but when i connect from my 1st connection. the IP address remain same?

              please tell me what i need to do now…thnx a lot

              1 Reply Last reply Reply Quote 0
              • johnpozJ
                johnpoz LAYER 8 Global Moderator
                last edited by

                dude your IP still does not ping, nor does it allow me login to the gui.

                Thought you said you put pfsense in your dmz of your "modem"..

                An intelligent man is sometimes forced to be drunk to spend time with his fools
                If you get confused: Listen to the Music Play
                Please don't Chat/PM me for help, unless mod related
                SG-4860 24.11 | Lab VMs 2.8, 24.11

                1 Reply Last reply Reply Quote 0
                • L
                  ll_hellBoy_ll
                  last edited by

                  hi. back again. sorry i told you before i am testing a lot. so this is not my main server. when i am on only that time i open my pfsense(openvpn server). also my problem was my modem(router) which was blocking my server. i have changed my modem now all ok for me. but i have little problem. i cant login more than 1 user at a time. i made 3 user account and i can login all 3 but not same time. please let me know how to solve this problem. thanks a lot. Marry Christmas

                  1 Reply Last reply Reply Quote 0
                  • chpalmerC
                    chpalmer
                    last edited by

                    Are you able to bridge your modem so that your pfSense box gets a public IP address?  Sure would make things easier on you.

                    Triggering snowflakes one by one..
                    Intel(R) Core(TM) i5-4590T CPU @ 2.00GHz on an M400 WG box.

                    1 Reply Last reply Reply Quote 0
                    • L
                      ll_hellBoy_ll
                      last edited by

                      hi. yes my modem is in bridge mode and my pfsense getting the public ip address. openvpn also working. just i cant login all my 3 account at same time. but i can login 1 at a time. what i have to do for this problem. thank you

                      1 Reply Last reply Reply Quote 0
                      • johnpozJ
                        johnpoz LAYER 8 Global Moderator
                        last edited by

                        change you the number of concurrent connections.

                        Are you using the same user/certs or do you have 3 different ones?

                        concurusers.png
                        concurusers.png_thumb

                        An intelligent man is sometimes forced to be drunk to spend time with his fools
                        If you get confused: Listen to the Music Play
                        Please don't Chat/PM me for help, unless mod related
                        SG-4860 24.11 | Lab VMs 2.8, 24.11

                        1 Reply Last reply Reply Quote 0
                        • L
                          ll_hellBoy_ll
                          last edited by

                          hi. sorry for late replay. yes i put 6 where you putted 2. and yes 3 different user but same CA. is it ok?

                          1 Reply Last reply Reply Quote 0
                          • johnpozJ
                            johnpoz LAYER 8 Global Moderator
                            last edited by

                            whatever number you want is ok..  They could all be same cert/user if you wanted, etc.  That is up to you.

                            An intelligent man is sometimes forced to be drunk to spend time with his fools
                            If you get confused: Listen to the Music Play
                            Please don't Chat/PM me for help, unless mod related
                            SG-4860 24.11 | Lab VMs 2.8, 24.11

                            1 Reply Last reply Reply Quote 0
                            • L
                              ll_hellBoy_ll
                              last edited by

                              hi. then why i cant login all 3 same time? i can login only 1 at a time. please let me know what to do…thank you

                              1 Reply Last reply Reply Quote 0
                              • johnpozJ
                                johnpoz LAYER 8 Global Moderator
                                last edited by

                                dude I have NO freaking idea what your doing wrong, since you have provided NOTHING in the way of information… What does the log say on both the server and the client when your saying it doesn't log in?

                                An intelligent man is sometimes forced to be drunk to spend time with his fools
                                If you get confused: Listen to the Music Play
                                Please don't Chat/PM me for help, unless mod related
                                SG-4860 24.11 | Lab VMs 2.8, 24.11

                                1 Reply Last reply Reply Quote 0
                                • First post
                                  Last post
                                Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.