Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    OpenVPN LAN Issues (WAN is fine)

    Scheduled Pinned Locked Moved OpenVPN
    4 Posts 2 Posters 1.2k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • ? Offline
      A Former User
      last edited by

      Hi guys,

      I have setup an OpenVPN server on pfSense. After installing the openvpn windows x64 client on my laptop - it will successfully connect via the openvpn client and internet (such as browsing) appears to function normally. But many times the laptop will not have LAN access such as accessing mapped network folders on my windows server 2012. Or if it does get LAN access it is quite slow and videos are barley playable.

      I am using my data on my smart phone as a hotspot for my laptop (windows 10) to connect externally so that I can test openvn on my laptop. I run a windows server 2012 domain.

      Hopefully I've included all the details and if you need any thing else let me know! All help is greatly appreciated.

      OpenVPN Serve Settings:





      pfSense LAN Interface:
      192.168.0.1/24

      OpenVPN Show Status Window on Laptop:

      Wed Nov 30 11:58:08 2016 OpenVPN 2.3.11 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on May 10 2016
      Wed Nov 30 11:58:08 2016 Windows version 6.2 (Windows 8 or greater) 64bit
      Wed Nov 30 11:58:08 2016 library versions: OpenSSL 1.0.1t  3 May 2016, LZO 2.09
      Wed Nov 30 11:58:19 2016 Control Channel Authentication: using 'pfSense-udp-1194-test-tls.key' as a OpenVPN static key file
      Wed Nov 30 11:58:19 2016 UDPv4 link local (bound): [undef]
      Wed Nov 30 11:58:19 2016 UDPv4 link remote: [AF_INET]174.7.154.251:1194
      Wed Nov 30 11:58:19 2016 WARNING: this configuration may cache passwords in memory – use the auth-nocache option to prevent this
      Wed Nov 30 11:58:20 2016 [www.much.org] Peer Connection Initiated with [AF_INET]174.7.154.251:1194
      Wed Nov 30 11:58:22 2016 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
      Wed Nov 30 11:58:22 2016 open_tun, tt->ipv6=0
      Wed Nov 30 11:58:22 2016 TAP-WIN32 device [Ethernet 2] opened: \.\Global{90A7B67D-5ABD-41B6-9D22-0143D8D78C60}.tap
      Wed Nov 30 11:58:22 2016 Set TAP-Windows TUN subnet mode network/local/netmask = 10.0.8.0/10.0.8.2/255.255.255.0 [SUCCEEDED]
      Wed Nov 30 11:58:22 2016 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.0.8.2/255.255.255.0 on interface {90A7B67D-5ABD-41B6-9D22-0143D8D78C60} [DHCP-serv: 10.0.8.254, lease-time: 31536000]
      Wed Nov 30 11:58:22 2016 Successful ARP Flush on interface [14] {90A7B67D-5ABD-41B6-9D22-0143D8D78C60}
      Wed Nov 30 11:58:27 2016 Initialization Sequence Completed

      Ipconfig data when logged in on normal domain (no OpenVPN)

      H:>ipconfig /all

      Windows IP Configuration

      Host Name . . . . . . . . . . . . : DD-LAPTOP
        Primary Dns Suffix  . . . . . . . : much.org
        Node Type . . . . . . . . . . . . : Hybrid
        IP Routing Enabled. . . . . . . . : No
        WINS Proxy Enabled. . . . . . . . : No
        DNS Suffix Search List. . . . . . : much.org

      Wireless LAN adapter Local Area Connection* 2:

      Media State . . . . . . . . . . . : Media disconnected
        Connection-specific DNS Suffix  . :
        Description . . . . . . . . . . . : Microsoft Wi-Fi Direct Virtual Adapter
        Physical Address. . . . . . . . . : 1E-85-56-7B-E6-CD
        DHCP Enabled. . . . . . . . . . . : Yes
        Autoconfiguration Enabled . . . . : Yes

      Ethernet adapter Ethernet 2:

      Media State . . . . . . . . . . . : Media disconnected
        Connection-specific DNS Suffix  . : pfsense.much.org
        Description . . . . . . . . . . . : TAP-Windows Adapter V9
        Physical Address. . . . . . . . . : 00-FF-90-A7-B6-7D
        DHCP Enabled. . . . . . . . . . . : Yes
        Autoconfiguration Enabled . . . . : Yes

      Wireless LAN adapter Wi-Fi:

      Connection-specific DNS Suffix  . : much.org
        Description . . . . . . . . . . . : Qualcomm Atheros AR5BWB222 Wireless Network Adapter
        Physical Address. . . . . . . . . : BC-85-56-7B-E6-CD
        DHCP Enabled. . . . . . . . . . . : Yes
        Autoconfiguration Enabled . . . . : Yes
        Link-local IPv6 Address . . . . . : fe80::b5d2:1a1e:7bdf:1ad%12(Preferred)
        IPv4 Address. . . . . . . . . . . : 192.168.0.53(Preferred)
        Subnet Mask . . . . . . . . . . . : 255.255.255.0
        Lease Obtained. . . . . . . . . . : Wednesday, November 30, 2016 12:03:03 PM
        Lease Expires . . . . . . . . . . : Thursday, December 8, 2016 12:03:02 PM
        Default Gateway . . . . . . . . . : 192.168.0.1
        DHCP Server . . . . . . . . . . . : 192.168.0.2
        DHCPv6 IAID . . . . . . . . . . . : 113018198
        DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-1F-40-36-F4-08-9E-01-B0-B6-39
        DNS Servers . . . . . . . . . . . : 192.168.0.2
                                            192.168.0.1
        NetBIOS over Tcpip. . . . . . . . : Enabled

      Tunnel adapter isatap.much.org:

      Media State . . . . . . . . . . . : Media disconnected
        Connection-specific DNS Suffix  . : much.org
        Description . . . . . . . . . . . : Microsoft ISATAP Adapter
        Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
        DHCP Enabled. . . . . . . . . . . : No
        Autoconfiguration Enabled . . . . : Yes

      Tunnel adapter Local Area Connection* 11:

      Media State . . . . . . . . . . . : Media disconnected
        Connection-specific DNS Suffix  . :
        Description . . . . . . . . . . . : Microsoft Teredo Tunneling Adapter
        Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
        DHCP Enabled. . . . . . . . . . . : No
        Autoconfiguration Enabled . . . . : Yes

      Ipconfig data when logged onto OpenVPN

      H:>ipconfig /all

      Windows IP Configuration

      Host Name . . . . . . . . . . . . : DD-LAPTOP
        Primary Dns Suffix  . . . . . . . : much.org
        Node Type . . . . . . . . . . . . : Hybrid
        IP Routing Enabled. . . . . . . . : No
        WINS Proxy Enabled. . . . . . . . : No
        DNS Suffix Search List. . . . . . : much.org
                                            pfsense.much.org

      Wireless LAN adapter Local Area Connection* 2:

      Media State . . . . . . . . . . . : Media disconnected
        Connection-specific DNS Suffix  . :
        Description . . . . . . . . . . . : Microsoft Wi-Fi Direct Virtual Adapter
        Physical Address. . . . . . . . . : 1E-85-56-7B-E6-CD
        DHCP Enabled. . . . . . . . . . . : Yes
        Autoconfiguration Enabled . . . . : Yes

      Ethernet adapter Ethernet 2:

      Connection-specific DNS Suffix  . : pfsense.much.org
        Description . . . . . . . . . . . : TAP-Windows Adapter V9
        Physical Address. . . . . . . . . : 00-FF-90-A7-B6-7D
        DHCP Enabled. . . . . . . . . . . : Yes
        Autoconfiguration Enabled . . . . : Yes
        Link-local IPv6 Address . . . . . : fe80::7928:7274:69e2:f775%14(Preferred)
        IPv4 Address. . . . . . . . . . . : 10.0.8.2(Preferred)
        Subnet Mask . . . . . . . . . . . : 255.255.255.0
        Lease Obtained. . . . . . . . . . : Wednesday, November 30, 2016 11:58:22 AM
        Lease Expires . . . . . . . . . . : Thursday, November 30, 2017 11:58:22 AM
        Default Gateway . . . . . . . . . :
        DHCP Server . . . . . . . . . . . : 10.0.8.254
        DHCPv6 IAID . . . . . . . . . . . : 234946448
        DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-1F-40-36-F4-08-9E-01-B0-B6-39
        DNS Servers . . . . . . . . . . . : 192.168.0.2
                                            192.168.0.1
        NetBIOS over Tcpip. . . . . . . . : Enabled

      Wireless LAN adapter Wi-Fi:

      Connection-specific DNS Suffix  . :
        Description . . . . . . . . . . . : Qualcomm Atheros AR5BWB222 Wireless Network Adapter
        Physical Address. . . . . . . . . : BC-85-56-7B-E6-CD
        DHCP Enabled. . . . . . . . . . . : Yes
        Autoconfiguration Enabled . . . . : Yes
        Link-local IPv6 Address . . . . . : fe80::b5d2:1a1e:7bdf:1ad%12(Preferred)
        IPv4 Address. . . . . . . . . . . : 192.168.43.108(Preferred)
        Subnet Mask . . . . . . . . . . . : 255.255.255.0
        Lease Obtained. . . . . . . . . . : Wednesday, November 30, 2016 8:05:23 AM
        Lease Expires . . . . . . . . . . : Wednesday, November 30, 2016 12:58:23 PM
        Default Gateway . . . . . . . . . : 192.168.43.1
        DHCP Server . . . . . . . . . . . : 192.168.43.1
        DHCPv6 IAID . . . . . . . . . . . : 113018198
        DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-1F-40-36-F4-08-9E-01-B0-B6-39
        DNS Servers . . . . . . . . . . . : 192.168.43.1
        NetBIOS over Tcpip. . . . . . . . : Enabled

      Tunnel adapter Local Area Connection* 11:

      Media State . . . . . . . . . . . : Media disconnected
        Connection-specific DNS Suffix  . :
        Description . . . . . . . . . . . : Microsoft Teredo Tunneling Adapter
        Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
        DHCP Enabled. . . . . . . . . . . : No
        Autoconfiguration Enabled . . . . : Yes

      Tunnel adapter isatap.pfsense.much.org:

      Media State . . . . . . . . . . . : Media disconnected
        Connection-specific DNS Suffix  . : pfsense.much.org
        Description . . . . . . . . . . . : Microsoft ISATAP Adapter #3
        Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
        DHCP Enabled. . . . . . . . . . . : No
        Autoconfiguration Enabled . . . . : Yes

      Tunnel adapter isatap.{AD942CF4-D3DD-4259-B671-659F1558DA9D}:

      Media State . . . . . . . . . . . : Media disconnected
        Connection-specific DNS Suffix  . :
        Description . . . . . . . . . . . : Microsoft ISATAP Adapter #4
        Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
        DHCP Enabled. . . . . . . . . . . : No
        Autoconfiguration Enabled . . . . : Yes

      My Windows Server 2012 Server (which is the Domain Controller, DHCP server and DNS server) ipconfig details:

      Windows IP Configuration

      Host Name . . . . . . . . . . . . : DD-SERVER
        Primary Dns Suffix  . . . . . . . : much.org
        Node Type . . . . . . . . . . . . : Hybrid
        IP Routing Enabled. . . . . . . . : Yes
        WINS Proxy Enabled. . . . . . . . : No
        DNS Suffix Search List. . . . . . : much.org

      Ethernet adapter Ethernet 3:

      Connection-specific DNS Suffix  . :
        Description . . . . . . . . . . . : Intel(R) Gigabit CT Desktop Adapter #2
        Physical Address. . . . . . . . . : 68-05-CA-2B-9F-86
        DHCP Enabled. . . . . . . . . . . : No
        Autoconfiguration Enabled . . . . : Yes
        IPv4 Address. . . . . . . . . . . : 192.168.0.2(Preferred)
        Subnet Mask . . . . . . . . . . . : 255.255.255.0
        Default Gateway . . . . . . . . . : 192.168.0.1
        DNS Servers . . . . . . . . . . . : 192.168.0.2
                                            192.168.0.1
        NetBIOS over Tcpip. . . . . . . . : Enabled

      Tunnel adapter Teredo Tunneling Pseudo-Interface:

      Media State . . . . . . . . . . . : Media disconnected
        Connection-specific DNS Suffix  . :
        Description . . . . . . . . . . . : Teredo Tunneling Pseudo-Interface
        Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
        DHCP Enabled. . . . . . . . . . . : No
        Autoconfiguration Enabled . . . . : Yes

      Tunnel adapter isatap.{E915DE81-BD61-4C6C-ADCC-06267325ACA4}:

      Media State . . . . . . . . . . . : Media disconnected
        Connection-specific DNS Suffix  . :
        Description . . . . . . . . . . . : Microsoft ISATAP Adapter
        Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
        DHCP Enabled. . . . . . . . . . . : No
        Autoconfiguration Enabled . . . . : Yes

      1 Reply Last reply Reply Quote 0
      • V Offline
        viragomann
        last edited by

        Seems you have an address conflict.

        Your wifi on client site has the 192.168.0.0/24 subnet as well as the server sides LAN. You have to change one of these.

        1 Reply Last reply Reply Quote 0
        • ? Offline
          A Former User
          last edited by

          Thanks for your response viragomann! I went into my asus router GUI and changed the LAN to: 192.168.5.1 and changed the subnet from 255.255.255.0 to 255.255.255.248. (also for some reason I can't access the asus gui with 192.168.5.1 anymore - will probably need to hard reset it later)

          Was that what you meant by changing one of them? (If so it appears the openvpn is still running slow)

          Thanks again!

          1 Reply Last reply Reply Quote 0
          • ? Offline
            A Former User
            last edited by

            Or I kind of see what you mean. (I think) My windows server 2012 is the dhcp server and it is on 255.255.255.0 subnet. I need to somehow change the subnet that my dhcp server is on (thus changing what it hands out to the clients)?

            1 Reply Last reply Reply Quote 0
            • First post
              Last post
            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.