Changing the Tunnel Network on OpenVPN connection

ca_maer

Hey guys,

I'm trying to change the Tunnel Network to use a different network. The VPN works fine but when changing the virtual network to something else I can connect but not access my internal LAN. The firewalls rule are all the same so that it rule's that out. The original OpenVPN settings were generated using the wizard.

I think this is related to routing but from the pfsense doc we don't need to add static route for openvpn as they are automatically managed.

I've tried the

push "route 10.0.1.0 255.255.255.0";

in the settings but to no avail. Plus it's working fine without it and when using the old virtual network

The Force all client-generated IPv4 traffic through the tunnel. is also checked.

I'm a little bit lost now. Is there another place I need to look/change ? Any ideas ?

Cheers

isolatedvirus

Have you tried restarting the openvpn service?

When you say the rules are all the same, do you mean on the OpenVPN interface (default allow all)?

ca_maer

Yes I've tried to restart the openvpn service but to no avail.

When you say the rules are all the same, do you mean on the OpenVPN interface (default allow all)?

Correct

Outbound NAT is automatic therefore also ok

Rico

As long as your tunnel network does not conflict with any other of your subnets it should be easy to change.
A good starting point is to check here: https://docs.netgate.com/pfsense/en/latest/book/openvpn/troubleshooting-openvpn.html

-Rico

ca_maer

@rico Thanks for the help ! I was able to resolve it with the link you provided. The issue was an IPsec overlapping connection. Cheers !

Rico

Glad you have it working now.

-Rico