Changing the Tunnel Network on OpenVPN connection



  • Hey guys,

    I'm trying to change the Tunnel Network to use a different network. The VPN works fine but when changing the virtual network to something else I can connect but not access my internal LAN. The firewalls rule are all the same so that it rule's that out. The original OpenVPN settings were generated using the wizard.

    I think this is related to routing but from the pfsense doc we don't need to add static route for openvpn as they are automatically managed.

    I've tried the

    push "route 10.0.1.0 255.255.255.0";
    

    in the settings but to no avail. Plus it's working fine without it and when using the old virtual network

    The Force all client-generated IPv4 traffic through the tunnel. is also checked.

    I'm a little bit lost now. Is there another place I need to look/change ? Any ideas ?

    Cheers



  • Have you tried restarting the openvpn service?

    When you say the rules are all the same, do you mean on the OpenVPN interface (default allow all)?



  • Yes I've tried to restart the openvpn service but to no avail.

    When you say the rules are all the same, do you mean on the OpenVPN interface (default allow all)?

    Correct

    Outbound NAT is automatic therefore also ok


  • LAYER 8 Rebel Alliance

    As long as your tunnel network does not conflict with any other of your subnets it should be easy to change.
    A good starting point is to check here: https://docs.netgate.com/pfsense/en/latest/book/openvpn/troubleshooting-openvpn.html

    -Rico



  • @rico Thanks for the help ! I was able to resolve it with the link you provided. The issue was an IPsec overlapping connection. Cheers !


  • LAYER 8 Rebel Alliance

    Glad you have it working now.

    -Rico


Log in to reply