NordVPN OpenVPN not supported on PfSense 2.5

Andoni

@bjames88 After upgraded, the nordVpn was KO, i uncheck the "enable data Encryption Nego" and the conexion was OK, thks!!

Steg

@ghost-0 thnx, i did a restore from my 2.4.5 backup and unchecked the data encr nego option and all comes back online
adding a new client will not work for some strange reason, but i will wait for the nordvpn instructions to come online

RumMonkey69

@steg after a clean install I can add new clients, no issues for nordvpn.

bjames88

Nord has not posted their documentation for setting up NordVPN on pfSense 2.5.0.

https://support.nordvpn.com/Connectivity/Router/1626958942/pfSense-2-5-Setup-with-NordVPN.htm

I just went through this new howto doc and made a few changes to my current settings. Those were mostly in the crypto settings for the client config as far as I remember but you might want to go through everything. So far it looks good, I'm connecting and working though the VPN.

Steg

@bjames88 the initial workaround was to disable data encryption negotiation, but the NordVpn instructions is turning them back on.
I had some strange issues with the workaround and have reinstalled my box completely using the NordVpn 2.5 instructions and it's up and running again.
I will save a 2.5 OS somewhere if future releases have similar issues i can go back (no 2.4.5 version to be found online (from a safe location))

jagradang

Does anyone know if this has been fixed in any of the release candidates yet or not. I'm struggling getting openvpn working at any usable speeds. It fluctuates from 10mb to zero and then all of a sudden i get 90mb. Its really random!!

Hoping this gets fixed soon!

bjames88

@jagradang I'm not sure this was ever offically reported as a bug. It seemed like most people here were able to get back up and running by either resetting up their VPN settings or following the updated NordVPN how-to. You might want to check the bug tracker to see if there is an existing one or file one.

Gertjan

@jagradang said in NordVPN OpenVPN not supported on PfSense 2.5:

Its really random!!

Encryption based on hashes is an all or nothing solution.
If one bit in a terra byte bi stream falls down, the entire stream is wasted.
Block(s) have to be re transmitted.
If the same bit falls again, all traffic stops.

Encryption doesn't yield random values as an outcome.
It works.
Or doesn't.

Fluctuation throughput most probably means : your issue is elsewhere.

jagradang

@gertjan well its definately related from what I can see.

I have managed to fix the fluctuating speeds by unchecking Enable Data Encryption Negotiation and changed the Fallback Data Encryption Algorithm to AES-128.

I get lots of warnings in the logs but it connects and my speeds are now consistently back to how the were before my upgrade.

How that's working or why, no idea but it seems to fix it for me so guessing from your comment even though it shouldn't affect it, it is for me.

jagradang

Does anyone know if this has now been fixed in later releases for pfsense. I still seem to be struggling with nordVpn working on pfsense :(

Astraea

@jagradang I have been using the 5.6 development build with no issues with NordVPN

jagradang

@astraea which version? did you mean the 2.6?

Astraea

@jagradang yes 2.6 typo.