CARP and OpenVPN

dbennett · Oct 7, 2016, 8:59 PM

Ok. Newbie question.

Having a difficult time getting my OpenVPN client to connect to my CARP VIP. I continue to receive TLS Errors. If I connect directly to the interface and the Outbound NAT Translation is the 'interface address' it works fine.

What am I missing?

Thanks ahead of time for your help.

Derelict · Oct 8, 2016, 5:54 AM

What is selected in the server configuration for Interface?

dbennett · Oct 10, 2016, 2:45 PM

The WAN CARP IP.

Derelict · Oct 10, 2016, 5:09 PM

Are all your firewall rules properly made for the CARP VIP and not WAN address??

axelf911 · May 3, 2018, 2:22 AM

I found that the solution can also lie in the interface settings.

https://forum.pfsense.org/index.php?topic=129871.0

In the OpenVPN Client Protocol dropdown, you probably have selected "UDP IPv4 and Ipv6 on all interfaces (multihome)".
That ignores the selected interface.
Select "UDP on IPv4 only"

This fixed the problem on my end.