Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    OpenVPN client specific override Error?

    Scheduled Pinned Locked Moved OpenVPN
    pfsenseclientspecificoverrideopenvpn
    13 Posts 3 Posters 1.8k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • V
      Vlee @Rico
      last edited by

      @Rico I'm not really sure. I am just trying to follow the guide by netgate. I am thinking what it says to paste in the Advanced section counts as special characters?

      d7b7b6ed-7cee-4362-bb38-e9ec107e32ce-image.png

      1 Reply Last reply Reply Quote 0
      • RicoR
        Rico LAYER 8 Rebel Alliance
        last edited by Rico

        "10.33.x.0" is no valid network...
        You can use the IPv4 Tunnel Network box in CSO to push the route(s) anyway which would be the better solution.

        -Rico

        V 1 Reply Last reply Reply Quote 1
        • V
          Vlee @Rico
          last edited by

          @Rico Oh! I'll look into the IPv4 Tunnel Network box.
          I did change the route to push"route 10.33.127.0 255.255.255.0" but got the same outcome.

          Thank you.

          1 Reply Last reply Reply Quote 0
          • noplanN
            noplan
            last edited by

            the only IPs you have to set in openVPN Server are here (and afaik no where else)

            413ca79f-87d0-4dde-ae20-3dc1fd2cf918-grafik.png

            ec3b8b0c-cc82-47ed-ba44-84e0db7de29f-grafik.png

            e4c202cd-0704-4dcd-8d44-c8fc020d05f4-grafik.png

            show the config of your setting openVPN (screenShot) and of client specific override

            V 1 Reply Last reply Reply Quote 0
            • V
              Vlee @noplan
              last edited by

              @noplan Ah maybe that's my issue. I haven't set a DNS or NTP Server
              This is what i Have as my ipv4 tunnel network 289479d5-54a1-4188-977c-206583e3714c-image.png

              1 Reply Last reply Reply Quote 0
              • noplanN
                noplan
                last edited by

                dns is nice
                ntp not nescessary

                my point was that you do not need more IPs than those

                out of the blue is your openVPN tunnel workin without client spec override ?

                what is workin and what is the issue ?

                V 1 Reply Last reply Reply Quote 0
                • V
                  Vlee @noplan
                  last edited by

                  @noplan
                  Thanks for the info.
                  I've never worked with client spec override. I am trying to set it up.
                  The issue is that when I go to save what I enter it seems to go missing.
                  If I go back to look at the changes I save, it is empty under the Client Specific Overrides tab.
                  Is that normal?

                  0e7095ba-ace0-49c2-801f-9688bf8637e1-image.png

                  1 Reply Last reply Reply Quote 0
                  • noplanN
                    noplan
                    last edited by

                    only things to choose n use for qnD
                    pre requirements (ad user and cert are all done and a client can connect and openVPN is wrokin)

                    7abb5926-49da-4183-85ce-3aec6a1d7006-grafik.png
                    6f8f681e-a835-4c53-87c7-68662da8f272-grafik.png

                    put here the IP for the override in CIDR format
                    d2c47ebc-42af-40eb-bc57-dfd265a442e6-grafik.png

                    optional depends on your settings
                    10105180-0135-4ec5-ae10-80484138a984-grafik.png

                    e44b276d-62ff-41b2-a77d-ad3e0aa1526f-grafik.png
                    0a643083-6545-4f0b-900d-cd05387affc4-grafik.png

                    if you believe me that i#m right if not not nescessary to fill some in
                    bb81636e-43df-4169-96db-8172cea7a50a-grafik.png

                    1 Reply Last reply Reply Quote 0
                    • RicoR
                      Rico LAYER 8 Rebel Alliance
                      last edited by Rico

                      Whops, sorry to say I told you the wrong CSO box (already had my 10 hrs workday ;-)). Correct is IPv4 Local Network/s and NOT IPv4 Tunnel Network.
                      But mostly you would define the networks/routes to push in the Server configuration.

                      -Rico

                      1 Reply Last reply Reply Quote 0
                      • noplanN
                        noplan
                        last edited by

                        @Rico
                        word! i do not need to unserstand why i would do this ;)
                        CSO local networks but here in ausrtia a lot of things are possible ;)

                        1 Reply Last reply Reply Quote 0
                        • First post
                          Last post
                        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.