OpenVPN Remote Access Server - only first connection works fine.

[a_sand]

Hello!
As I can understand it is a common problem, but there is no typical solution.
I have configured OpenVPN for remote access with wizard.
First client connected and all works fine. Client have access anywhere I want (as per configured subnets). But any another clients can connect, get the routes and then....nothing. They cannot ping anything including VPN server.

As per my investigation it is due to additional tunnels does not created at pfSense side.

10.150.100.1 is my VPN server.
10.150.100.2 is the first connected client.

While 2-nd and another clients connected there is no additional tunnels like 10.150.100.1 --> 10.150.100.x created.

I have even reinstall pfSense and confugure VPN from a scratch. There is no effect.

Please give me an idea.

My config

[viragomann]

Do you use different user certificates for each client?

[a_sand]

Of course.
The certificates are different.
also clients gets different IP's.

[Rico]

You have the User CSOs in place? VPN > OpenVPN > Client Specific Overrides
I always start with .11 for the first user, second .12 and so on.
Afaik 10.150.100.2 should not be your first user, it's the 'virtual' Gateway used by OpenVPN. You don't see the clients in the system routing table, they are managed inside OpenVPN.

-Rico

[a_sand]

@Rico I have no CSO

[Rico]

Check the OpenVPN Routing table in Status > OpenVPN
And give it a try with CSOs.

-Rico