OpenVPN configuration file issue
-
Using pfsense 2.4.5-RELEASE-p1 (amd64)
My config file contains the following:
... pull-filter ignore "ifconfig-ipv6 " pull-filter ignore "route-ipv6 " resolv-retry infinite ...
I am able to connect and use OpenVPN upon saving this configuration. However, if I disconnect or am disconnected, I cannot reconnect. The log shows the following error:
Jan 15 21:28:31 openvpn 36137 Use --help for more information. Jan 15 21:28:31 openvpn 36137 Options error: Unrecognized option or missing or extra parameter(s) in /var/etc/openvpn/client1.conf:37: pull-filter (2.4.9) Jan 15 21:18:55 openvpn 71457 Use --help for more information. Jan 15 21:18:55 openvpn 71457 Options error: Unrecognized option or missing or extra parameter(s) in /var/etc/openvpn/client1.conf:37: pull-filter (2.4.9)
Reviewing the configuration, it has been modified without my intervention to the following:
pull-filter ignore "ifconfig-ipv6 "pull-filter ignore "route-ipv6 "resolv-retry infinite
Note that the newlines after the quotes are missing.
Adding comments before the newline appears as an effective workaround:
pull-filter ignore "ifconfig-ipv6 "# pull-filter ignore "route-ipv6 "# resolv-retry infinite
-
@ancjr What is the origin of this file?
Please describe the use case scenario -
@netblues The file is edited from the webconfigurator: VPN / OpenVPN / Clients / Edit / "Advanced Configuration" / "Custom Options"
I added these lines originally to eliminate extra lines in the log warning of the inability to create IPV6 routes. I do not use IPV6 on this system.
-
@ancjr Did you use semicolons as it says at the bottom?
My config looks like this
And works with no issues
-
@netblues That would be the issue. It is strange that the entire config worked without the semicolons until I added those lines. Nevertheless, it appears to be working normally now. Thanks.