Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Issue Connecting pfsense as a client to OpenVPN Access Server

    Scheduled Pinned Locked Moved OpenVPN
    20 Posts 3 Posters 3.3k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • johnpozJ
      johnpoz LAYER 8 Global Moderator
      last edited by johnpoz

      Seems you didn't follow the part where it says
      " pfSense may be configured to use the info in the .ovpn file"

      โ˜บ

      0_1549286645395_validateyourauth.png

      And not encryption and auth. Double check all your other settings.

      example here is my client config form pfsense for my openvpn-as server

      dev ovpnc3
      verb 1
      dev-type tun
      dev-node /dev/tun3
      writepid /var/run/openvpn_client3.pid
      #user nobody
      #group nobody
      script-security 3
      daemon
      keepalive 10 60
      ping-timer-rem
      persist-tun
      persist-key
      proto udp4
      cipher AES-256-CBC
      auth SHA256
      up /usr/local/sbin/ovpn-linkup
      down /usr/local/sbin/ovpn-linkdown
      local 64.53.<snipped>
      engine rdrand
      tls-client
      client
      lport 0
      management /var/etc/openvpn/client3.sock unix
      remote <snipped> 1195
      ca /var/etc/openvpn/client3.ca 
      cert /var/etc/openvpn/client3.cert 
      key /var/etc/openvpn/client3.key 
      tls-auth /var/etc/openvpn/client3.tls-auth 1
      ncp-ciphers AES-128-GCM:AES-192-GCM:AES-256-GCM:AES-128-CBC:AES-192-CBC:AES-256-CBC
      comp-lzo no
      resolv-retry infinite
      route-nopull
      fast-io
      sndbuf 524288
      rcvbuf 524288
      [2.4.4-RELEASE][root@sg4860.local.lan]/var/etc/openvpn: 
      

      notice
      tls-auth /var/etc/openvpn/client3.tls-auth 1

      An intelligent man is sometimes forced to be drunk to spend time with his fools
      If you get confused: Listen to the Music Play
      Please don't Chat/PM me for help, unless mod related
      SG-4860 24.11 | Lab VMs 2.8, 24.11

      1 Reply Last reply Reply Quote 0
      • S
        shahid3507
        last edited by

        @johnpoz
        My bad, missed it.
        By the way do you know anything regarding Bidirectional ping part ?
        I have added any to any config in firewall for all interfaces still it dosen't work.

        Can you please help me in this on how to do it ?
        cc: @Rico

        1 Reply Last reply Reply Quote 0
        • johnpozJ
          johnpoz LAYER 8 Global Moderator
          last edited by

          What are you trying to ping?

          An intelligent man is sometimes forced to be drunk to spend time with his fools
          If you get confused: Listen to the Music Play
          Please don't Chat/PM me for help, unless mod related
          SG-4860 24.11 | Lab VMs 2.8, 24.11

          1 Reply Last reply Reply Quote 0
          • S
            shahid3507
            last edited by

            The tunnel is connecting and I am able to ping the AWS side (Access server subnet) but when I am trying to ping the client side form the access server or the subnet than it's not reachable.

            1 Reply Last reply Reply Quote 0
            • S
              shahid3507
              last edited by

              Any Idea regarding this connectivity stuff @Rico ??

              1 Reply Last reply Reply Quote 0
              • RicoR
                Rico LAYER 8 Rebel Alliance
                last edited by

                Not atm, I don't have any experience with OpenVPN AS or AWS, sorry. ๐Ÿ˜‘
                But my guess is @johnpoz will come back with some ideas. ๐Ÿ˜€

                -Rico

                1 Reply Last reply Reply Quote 0
                • johnpozJ
                  johnpoz LAYER 8 Global Moderator
                  last edited by

                  Ping what exactly? Can you ping the lan IP of pfsense from your aws side?

                  An intelligent man is sometimes forced to be drunk to spend time with his fools
                  If you get confused: Listen to the Music Play
                  Please don't Chat/PM me for help, unless mod related
                  SG-4860 24.11 | Lab VMs 2.8, 24.11

                  1 Reply Last reply Reply Quote 0
                  • S
                    shahid3507
                    last edited by

                    No I can't @johnpoz

                    1 Reply Last reply Reply Quote 0
                    • johnpozJ
                      johnpoz LAYER 8 Global Moderator
                      last edited by

                      What is your routing on your aws side show you how to get to your lan network?

                      An intelligent man is sometimes forced to be drunk to spend time with his fools
                      If you get confused: Listen to the Music Play
                      Please don't Chat/PM me for help, unless mod related
                      SG-4860 24.11 | Lab VMs 2.8, 24.11

                      1 Reply Last reply Reply Quote 0
                      • S
                        shahid3507
                        last edited by

                        There was a need to add route for specific traffic and change the OpenVPN settings to act as site to site VPN.
                        It is now working.

                        Thanks for your help @johnpoz @Rico

                        1 Reply Last reply Reply Quote 0
                        • First post
                          Last post
                        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.