NordVPN OpenVPN not supported on PfSense 2.5

psp

@rummonkey69 said in NordVPN OpenVPN not supported on PfSense 2.5:

upgrade or clean install?

Clean install of 2.5.0, then restored old full backup from 2.4.5-p1.

RumMonkey69

@psp yeah see i upgraded and many of the people with a clean install are not having the same issues.

I might just have to clean install :(

I think my last backup was a fair while back... I always say " I should take a backup before I upgrade...."

then never do , lol :(

bjames88

@nogbadthebad Hey I notice you have multiple Nord connections/gateways what does that do for you? Failover if one goes down? Thanks for the info in advance.

bjames88

I just upgraded to 2.5 and also seeing this issue. The OpenVPN connection shows connected and up but the gateway shows down. I see traffic outbound but nothing incoming. I'm also seeing this in the System Logs / OpenVPN, "Authenticate/Decrypt packet error: missing authentication info". I watching this thread in hope to get a poke in the right direction. Thanks.

bjames88

I played with the settings a while and finally got mine working again by unchecking "Enable Data Encryption Negotiation". You might want to reboot after making this change.

Ghost 0

This new pfSense version 2.5 initially failed with NordVPN. It is now working after a clean install with restoration of backup.... And not checking "Enable Data Encryption Negotiation" under openvpn per this thread. Bottom-line is: Do a clean install and unchecked "Enable Data Encryption Negotiation" per above user in this thread.

mrsunfire

@ghost-0 Same here with Cyberghost.

RumMonkey69

@bjames88 yeah failover

Steg

@nogbadthebad did you use the nordvpn instructions to get it working?
asking it because there are settings in 2.5.0 that are not mentioned in any of the available nordvpn instructions
and only turning off the data encryption negotiation does not get my client up and running

Gertjan

@steg said in NordVPN OpenVPN not supported on PfSense 2.5:

did you use the nordvpn instructions to get it working?

I'll answer that for him - as it's an easy one :
Yes, of course.
( if these exists - if not, they should as least publish a "opvn" (client) config file )

I'm not using NrdVN myself, but I strongly presume they do not use the latest OpenVPN version themselves (if they are using "OpenVPN", they could have build their own from scratch or the open source ).

I'm using xpssV*N myself, and they point me to here ( https://openvpn.net/community-downloads/ ) and download the last version, which is 2.5.0 (same as the new old actual pfSense version, just a coincidence ). pfSense 2.5.0 uses also the latest OpenVPN 2.5.0 software.

@steg said in NordVPN OpenVPN not supported on PfSense 2.5:

asking it because there are settings in 2.5.0 that are not mentioned in any of the available nordvpn instructions
and only turning off the data encryption negotiation does not get my client up and running

What are their "opvn" instructions ?
What does the client OpenVPN log tells you ?

"not get my client up and running" as a problem description is minimalistic.
Also, take note : you won't find many pfSense admin using NrdVN ( they made it to national TV - and not for publicity ).

Ghost 0

I use NordVPN in PfSense. I followed the instructions from NordVPN for 2.4.5. I recently upgraded to pfSense2.5 directly from 2.4.5. This method of upgrade failed to activate NordVPN. Subsequently, I did a clean install with restore of configurations from 2.4.5 after it was suggested by a user from this forum. I was still having trouble with NordVPN. After more reasearch, I stumbled on a tread that suggested to unchecked " Enable Data Encryption Negotiation." This solved my issue after seeing that thread. NordVPN doesn't have instructions for pfSense 2.5 because it was just released. I suggest you temporarily install pfSense 2.4.5 then follow the NordVPN instructions for that version. After that, backup the configurations. Now, install pfSense 2.5 via clean installation then restore the backup you made from 2.4.5 in 2.5 and unchecked "Enable Data Encryption Negotiation under the openVPN tab. I hope this works for you.

Andoni

@bjames88 After upgraded, the nordVpn was KO, i uncheck the "enable data Encryption Nego" and the conexion was OK, thks!!

Steg

@ghost-0 thnx, i did a restore from my 2.4.5 backup and unchecked the data encr nego option and all comes back online
adding a new client will not work for some strange reason, but i will wait for the nordvpn instructions to come online

RumMonkey69

@steg after a clean install I can add new clients, no issues for nordvpn.

bjames88

Nord has not posted their documentation for setting up NordVPN on pfSense 2.5.0.

https://support.nordvpn.com/Connectivity/Router/1626958942/pfSense-2-5-Setup-with-NordVPN.htm

I just went through this new howto doc and made a few changes to my current settings. Those were mostly in the crypto settings for the client config as far as I remember but you might want to go through everything. So far it looks good, I'm connecting and working though the VPN.

Steg

@bjames88 the initial workaround was to disable data encryption negotiation, but the NordVpn instructions is turning them back on.
I had some strange issues with the workaround and have reinstalled my box completely using the NordVpn 2.5 instructions and it's up and running again.
I will save a 2.5 OS somewhere if future releases have similar issues i can go back (no 2.4.5 version to be found online (from a safe location))

jagradang

Does anyone know if this has been fixed in any of the release candidates yet or not. I'm struggling getting openvpn working at any usable speeds. It fluctuates from 10mb to zero and then all of a sudden i get 90mb. Its really random!!

Hoping this gets fixed soon!

bjames88

@jagradang I'm not sure this was ever offically reported as a bug. It seemed like most people here were able to get back up and running by either resetting up their VPN settings or following the updated NordVPN how-to. You might want to check the bug tracker to see if there is an existing one or file one.

Gertjan

@jagradang said in NordVPN OpenVPN not supported on PfSense 2.5:

Its really random!!

Encryption based on hashes is an all or nothing solution.
If one bit in a terra byte bi stream falls down, the entire stream is wasted.
Block(s) have to be re transmitted.
If the same bit falls again, all traffic stops.

Encryption doesn't yield random values as an outcome.
It works.
Or doesn't.

Fluctuation throughput most probably means : your issue is elsewhere.

jagradang

@gertjan well its definately related from what I can see.

I have managed to fix the fluctuating speeds by unchecking Enable Data Encryption Negotiation and changed the Fallback Data Encryption Algorithm to AES-128.

I get lots of warnings in the logs but it connects and my speeds are now consistently back to how the were before my upgrade.

How that's working or why, no idea but it seems to fix it for me so guessing from your comment even though it shouldn't affect it, it is for me.