Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    see local network ip address on pfsense

    Scheduled Pinned Locked Moved General pfSense Questions
    60 Posts 7 Posters 22.2k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • JKnottJ
      JKnott @A Former User
      last edited by

      @antonio-briguglio

      With OpenVPN, you'd typically provide the WAN address, as the target to connect to.

      PfSense running on Qotom mini PC
      i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
      UniFi AC-Lite access point

      I haven't lost my mind. It's around here...somewhere...

      1 Reply Last reply Reply Quote 0
      • ?
        A Former User
        last edited by

        This post is deleted!
        JKnottJ 1 Reply Last reply Reply Quote 0
        • JKnottJ
          JKnott @A Former User
          last edited by

          @antonio-briguglio

          Where are you seeing that? It doesn't quite match anything I have. Is that the server or client config. I can understand the tunnels and forcing through the gateway, but what is that last box? I don't seem to have it, at least not where you show it. It seems to be the end point address, but for me that's on the client export page.

          What version of pfsense are you running?

          PfSense running on Qotom mini PC
          i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
          UniFi AC-Lite access point

          I haven't lost my mind. It's around here...somewhere...

          GertjanG 1 Reply Last reply Reply Quote 0
          • GertjanG
            Gertjan @JKnott
            last edited by

            @jknott said in see local network ip address on pfsense:

            I don't seem to have it,

            Uncheck

            b2e88d9a-23db-49ea-9ed8-0a2adbaffd38-image.png

            and you'll see it.

            @Antonio-Briguglio : check these two, client traffic will get forced through the gateway, and your local LAN's will get included as a route.
            If unchecked, you have to list your local LAN's that need to be accessible trough VPN.

            No "help me" PM's please. Use the forum, the community will thank you.
            Edit : and where are the logs ??

            1 Reply Last reply Reply Quote 0
            • stephenw10S
              stephenw10 Netgate Administrator
              last edited by

              You won't see that if you have redirect gateway set as that routes all traffic over the VPN.

              The local networks field defines what routes are sent to the client when it connects (if it's not routing everything)

              So normally you would enter the LAN subnet there. And any other subnets local to the server you want clients to be able to connect to.

              Steve

              ? 1 Reply Last reply Reply Quote 0
              • ?
                A Former User @stephenw10
                last edited by

                @stephenw10 but in addition to configuring the openvpn server, do I also have to configure the client to connect?
                Yes I forced gateway but it does not connect anyway it tells me waiting for the server

                JKnottJ 1 Reply Last reply Reply Quote 0
                • JKnottJ
                  JKnott @A Former User
                  last edited by

                  @antonio-briguglio

                  Are you referring to this?

                  c4fe2ead-e3ce-4445-8eaa-63f128acaa10-image.png

                  If so, you don't. I made that mistake when I first set up my VPN and had to change it when I got new hardware, resulting in a different host address. When I started from scratch again, I left it blank, as it says to in the text below those boxes.

                  PfSense running on Qotom mini PC
                  i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
                  UniFi AC-Lite access point

                  I haven't lost my mind. It's around here...somewhere...

                  1 Reply Last reply Reply Quote 0
                  • stephenw10S
                    stephenw10 Netgate Administrator
                    last edited by

                    Indeed. In a TLS/SSL OpenVPN tunnel all the routing and tunnel details are passed to the client by the server.
                    You do not need to set those details on the client.

                    Steve

                    JKnottJ 1 Reply Last reply Reply Quote 0
                    • JKnottJ
                      JKnott @stephenw10
                      last edited by

                      @stephenw10

                      I should have added IPv4 continued to work, as I had the same subnet, but IPv6 broke, as the new hardware resulted in a new prefix.

                      PfSense running on Qotom mini PC
                      i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
                      UniFi AC-Lite access point

                      I haven't lost my mind. It's around here...somewhere...

                      ? 1 Reply Last reply Reply Quote 0
                      • ?
                        A Former User @JKnott
                        last edited by

                        @jknott @stephenw10
                        I give up I'm not able to connect opnvp I tried everything but nothing wrong something. I followed all the guides but one that worked and simple to do is not there. Now I restore the previous configuration thanks :-(

                        jahonixJ JKnottJ 2 Replies Last reply Reply Quote 0
                        • jahonixJ
                          jahonix @A Former User
                          last edited by

                          @antonio-briguglio Maybe setting up an OpenVPN server is a bit over your current abilities:

                          @antonio-briguglio said in IP Pfsense:
                          Hi, in the SG-1100 the ip address is 192.168.1.1/24
                          Does this mean that the SG-1100's IP will have to vary between 192.168.1.2 and 192.168.1.24?
                          Exact?

                          First you have to understand the basics. Setting up an OpenVPN server is not basic.

                          1 Reply Last reply Reply Quote 0
                          • JKnottJ
                            JKnott @A Former User
                            last edited by

                            @antonio-briguglio

                            Have you tried using the Wizard? I've never bothered with it, but it apparently makes things simpler.

                            PfSense running on Qotom mini PC
                            i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
                            UniFi AC-Lite access point

                            I haven't lost my mind. It's around here...somewhere...

                            GertjanG 1 Reply Last reply Reply Quote 0
                            • stephenw10S
                              stephenw10 Netgate Administrator
                              last edited by

                              Yuo, I always use the Wizard for a RA server. Much quicker. You can easily make adjustments afterwards.

                              Steve

                              1 Reply Last reply Reply Quote 0
                              • GertjanG
                                Gertjan @JKnott
                                last edited by

                                @jknott said in see local network ip address on pfsense:

                                Have you tried using the Wizard?

                                These are ment to be used by people who already know how it works.
                                Like : "stance out a frame work and fine tune afterwards".
                                Please don't tell me know that it is the other way around ...

                                No "help me" PM's please. Use the forum, the community will thank you.
                                Edit : and where are the logs ??

                                ? 1 Reply Last reply Reply Quote 0
                                • ?
                                  A Former User @Gertjan
                                  last edited by

                                  @gertjan @jknott @stephenw10 @jahonix It is absolutely not true that I don't have the basics to configure an openvpn.
                                  The problem is not the configuration of an openvpn, but the configuration of the pfsense firewall which unf.ortunately I cannot understand which of the settings I have put in pfsense blocks the connection with the server.
                                  Netgate does not provide a guide in which it says that to configure an openvpn some settings may conflict and I have not found anything about this on the net.
                                  I conclude that the configuration I made is correct, the problem of conflicts remains

                                  johnpozJ 1 Reply Last reply Reply Quote 0
                                  • johnpozJ
                                    johnpoz LAYER 8 Global Moderator @A Former User
                                    last edited by

                                    What are you trying to do exactly?

                                    http://docs.netgate.com/pfsense/en/latest/vpn/openvpn/configure.html

                                    But as mentioned the wizard is the fastest easiest way to setup a road warrior setup.

                                    You don't know what your local network is? As mentioned this would your lan network, or your other networks you setup on pfsense.

                                    192.168.1.1/24 is not it - that would be a host address, not a network address.. If pfsense lan IP is 192.168.1.1/24 then your local network would be 192.168.1.0/24

                                    This would tell your vpn client - hey you want to get to 192.168.1.0/24 come down the tunnel.

                                    For your remote client to connect to pfsense - it would need the wan IP to connect to.. All of the info for your clients can be exported with the openpvn export package. Just pick your wan address. Unless your behind a nat on you pfsense wan?

                                    An intelligent man is sometimes forced to be drunk to spend time with his fools
                                    If you get confused: Listen to the Music Play
                                    Please don't Chat/PM me for help, unless mod related
                                    SG-4860 24.11 | Lab VMs 2.8, 24.11

                                    ? 3 Replies Last reply Reply Quote 0
                                    • ?
                                      A Former User @johnpoz
                                      last edited by

                                      @johnpoz pfsense's IP is 192.168.1.1/24, so the local network is 192.168.1.0/24.
                                      The tunnel network I put 10.29.30.0/24
                                      the three certificates have been activated, the profile burning too.
                                      Then he imported the client configuration for android on the openvpn app I put username and password and it tells me wait for connection to the server and then it stops.
                                      But is it because I have an access point connected in lan wifi that has another ip address?

                                      1 Reply Last reply Reply Quote 0
                                      • ?
                                        A Former User @johnpoz
                                        last edited by

                                        IMG-20210209-WA0000.jpg @johnpoz ===group

                                        ===

                                        johnpozJ 1 Reply Last reply Reply Quote 0
                                        • johnpozJ
                                          johnpoz LAYER 8 Global Moderator @A Former User
                                          last edited by

                                          If pfsense is behind a nat router, then you would have to forward your vpn port to pfsense wan, if you want remote clients to be able to get to the vpn running on pfsense.

                                          If your AP is actually wifi router and your natting again?

                                          An intelligent man is sometimes forced to be drunk to spend time with his fools
                                          If you get confused: Listen to the Music Play
                                          Please don't Chat/PM me for help, unless mod related
                                          SG-4860 24.11 | Lab VMs 2.8, 24.11

                                          1 Reply Last reply Reply Quote 0
                                          • stephenw10S
                                            stephenw10 Netgate Administrator
                                            last edited by

                                            Yes, you are behind the Fritzbox and it is in router mode.

                                            So if you are connecting from an external public IP the Fritzbox will need to be forwarding OpenVPN traffic to pfSense.

                                            Steve

                                            ? 1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.