Openvpn works with tcp but it does not work with udp

mgiammarco

Hello,
I have a dual wan configuration with two pfsense in high availability using carp with three virtual ip (wan, wan2 and lan).

I have openvpn on first wan (I know that second wan has problems).

I have a configuration working with tcp. If I change it do udp (and I change firewall to udp) it does not work anymore.

I have debugged it:

netstat says that openvpn is listening on udp on * with right port;
packet dump says that udp packets reach lan virtual ip;
open vpn log says nothing;
packet dump says also that there are no packet exiting from virtual ip to reach remote client.

In tcp version obviously there is bidirectional traffic from internet to openvpn port on lan virtual ip.

What is happening? Is it a bug? Please help me.

PLEASE NOTE that I have turned off slave pfsense to simplify testing.

Thanks in advance,
Mario

mgiammarco

Hello,
at least is there someone that is using a configuration with carp and has udp working???

Thanks ,

Mario

mgiammarco

Ok now it works. It is due to a bad configuration.