OpenVPN No WAN access and some other issues
-
@lordbob75
You can simply check if it's a DNS issue by entering a public IP into the browser, i.g. 74.6.231.21 for yahoo. -
@viragomann said in OpenVPN No WAN access and some other issues:
@lordbob75
You can simply check if it's a DNS issue by entering a public IP into the browser, i.g. 74.6.231.21 for yahoo.Aha, ok yes that worked. So it's DNS.
My OpenVPN server should be pushing the pfsense firewall as the DNS server. I'll take a look at that then.
-
@viragomann said in OpenVPN No WAN access and some other issues:
@lordbob75
You can simply check if it's a DNS issue by entering a public IP into the browser, i.g. 74.6.231.21 for yahoo.So it turns out I do have an app that shows network settings. I've got the right IP address, subnet, and even the right DNS server.
I'm not able to ping anything from that app, whether by IP or hostname.I was able to pull up yahoo and google by IP address in the web browser though.
I'm also able to access the firewall on VPN, but not ping it from the app either.
-
and even the right DNS server
So the DNS server is pfSense?
Is there a firewall rule in place on the pfSense allowing the access to the DNS server and pings to go ouit.Is it your intention to route the whole internet traffic over the VPN?
If yes, do you also have an outbound NAT rule on WAN interface for the OpenVPN tunnel network? -
@viragomann said in OpenVPN No WAN access and some other issues:
and even the right DNS server
So the DNS server is pfSense?
Is there a firewall rule in place on the pfSense allowing the access to the DNS server and pings to go ouit.Is it your intention to route the whole internet traffic over the VPN?
If yes, do you also have an outbound NAT rule on WAN interface for the OpenVPN tunnel network?Yes, I want everything from the phone to go through the VPN.
I believe I have the outbound NAT setup correctly, plus it was auto-generated
Tried to post a screenshot but it keeps getting flagged as spam for some reason.Source is VPN network, any port
Destination is WAN address, any port -
@lordbob75 said in OpenVPN No WAN access and some other issues:
So the Phone Settings show a 192.168.4.x address,
So your connected to a Wifi network. Your not in the wild, using the 3G/4G/5G carrier connection.
@lordbob75 said in OpenVPN No WAN access and some other issues:
but OpenVPN shows a 10.0.0.x address.
OpenVPN what ?
The OpenVPN server on pfSense ? Your WAN pfSense has the IP 10.0.0.x ?
OpenVPN client on the phone ? Thus the IP it connects to ?
Btw : btw : no need to hide RFC1918 addresses, as they are local. We all use the same addresses.Are you connected to Wifi, and are you on the location where you have the pfSense OpenVPN server ? Other location ?
@lordbob75 said in OpenVPN No WAN access and some other issues:
I believe I have the outbound NAT setup correctly, plus it was auto-generated
No need to do anything with NAT.
No need t make a NAT rule.
The OpenVPN wizard didn't make one neither.
It makes a firewall pass rule on the WAN** interface.** or the interface you chose, but normally it is WAN, as VPN connections come from the 'outside' = a device like your phone somewhere on the Internet that want to come in.
General questions :
Is your pfSense box behind an ISP device , Modem ? A router ? What is your real WAN IP (the one you have on the Internet (and this time you should use an 'x' ^^).
If you are on site - the place where your pfsense openvpn is, connected to your Wifi - which is connected to your pfSense, you do not need (should not use !) a VPN connection. You are already in a - your ! - trusted network, and can connect to local devices. You phone would already use your pfSense router to gain access to the Internet.
When testing the VPN connection, shut down your Wifi in your phone first **** Except if you are on another location, using that local Wifi network. But first, make it work without the phone wifi activated. If that works, you can use the wifi if your not on your location. Example : using the wifi at your friend's place.
Tried to post a screenshot but it keeps getting flagged as spam for some reason.
You are a new member on a forum. Links, image etc are limited in the beginning (less then 5 up-votes or 'likes'). I'll add one right now to get the process started.
-
@gertjan said in OpenVPN No WAN access and some other issues:
OpenVPN what ?
The OpenVPN server on pfSense ? Your WAN pfSense has the IP 10.0.0.x ?
OpenVPN client on the phone ? Thus the IP it connects to ?
Btw : btw : no need to hide RFC1918 addresses, as they are local. We all use the same addresses.Ah, sorry. The OpenVPN application on my phone, so the client. It should show the IP address my phone is getting for my VPN network.
@gertjan said in OpenVPN No WAN access and some other issues:
Are you connected to Wifi, and are you on the location where you have the pfSense OpenVPN server ? Other location ?
I'm at home and just turning my wifi off on my phone to connect with the VPN over the cell network.
@gertjan said in OpenVPN No WAN access and some other issues:
@lordbob75 said in OpenVPN No WAN access and some other issues:
I believe I have the outbound NAT setup correctly, plus it was auto-generated
No need to do anything with NAT.
No need t make a NAT rule.
The OpenVPN wizard didn't make one neither.
It makes a firewall pass rule on the WAN** interface.** or the interface you chose, but normally it is WAN, as VPN connections come from the 'outside' = a device like your phone somewhere on the Internet that want to come in.
Well it says auto-generated in the description.
@gertjan said in OpenVPN No WAN access and some other issues:
General questions :
Is your pfSense box behind an ISP device , Modem ? A router ? What is your real WAN IP (the one you have on the Internet (and this time you should use an 'x' ^^).
If you are on site - the place where your pfsense openvpn is, connected to your Wifi - which is connected to your pfSense, you do not need (should not use !) a VPN connection. You are already in a - your ! - trusted network, and can connect to local devices. You phone would already use your pfSense router to gain access to the Internet.
When testing the VPN connection, shut down your Wifi in your phone first **** Except if you are on another location, using that local Wifi network. But first, make it work without the phone wifi activated. If that works, you can use the wifi if your not on your location. Example : using the wifi at your friend's place.
ISP Modem > PFsense firewall > LAN
I'm turning off wifi on my phone and connecting to it over the cell network.@gertjan said in OpenVPN No WAN access and some other issues:
Tried to post a screenshot but it keeps getting flagged as spam for some reason.
You are a new member on a forum. Links, image etc are limited in the beginning (less then 5 up-votes or 'likes'). I'll add one right now to get the process started.
Oh ok. I suppose I could link to Imgur or something too.
-
@lordbob75 said in OpenVPN No WAN access and some other issues:
ISP Modem > PFsense firewall > LAN
pfSense has the WAN ("Internet" IP) and not an RFC1918, right ?
When yon use your cell phone, you can see that it uses this IP to connect to, right ?
-
@gertjan said in OpenVPN No WAN access and some other issues:
@lordbob75 said in OpenVPN No WAN access and some other issues:
ISP Modem > PFsense firewall > LAN
pfSense has the WAN ("Internet" IP) and not an RFC1918, right ?
When yon use your cell phone, you can see that it uses this IP to connect to, right ?
Correct, my PFSense WAN gateway has a public IP 71.84.X.X
I'm not sure how I'd see it on my phone but everything works normally when connected to wifi, it's just VPN. -
It's working again after restoring from my most recent backup.
No clue what went wrong before.
I've turned off hardware acceleration in OpenVPN server and it does look like the speed increased, but it also looks like my network isn't getting the right speeds so I can't tell what I'll get until that's fixed by the ISP.
I did go from 5Mb/s to 20 though, so that's a good sign.
