• Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login
Netgate Discussion Forum
  • Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login

OpenVPN client specific override Error?

Scheduled Pinned Locked Moved OpenVPN
pfsenseclientspecificoverrideopenvpn
13 Posts 3 Posters 1.4k Views
Loading More Posts
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • V
    Vlee @Rico
    last edited by Apr 14, 2020, 2:59 PM

    @Rico I'm not really sure. I am just trying to follow the guide by netgate. I am thinking what it says to paste in the Advanced section counts as special characters?

    d7b7b6ed-7cee-4362-bb38-e9ec107e32ce-image.png

    1 Reply Last reply Reply Quote 0
    • R
      Rico LAYER 8 Rebel Alliance
      last edited by Rico Apr 14, 2020, 3:02 PM Apr 14, 2020, 3:00 PM

      "10.33.x.0" is no valid network...
      You can use the IPv4 Tunnel Network box in CSO to push the route(s) anyway which would be the better solution.

      -Rico

      V 1 Reply Last reply Apr 14, 2020, 3:04 PM Reply Quote 1
      • V
        Vlee @Rico
        last edited by Apr 14, 2020, 3:04 PM

        @Rico Oh! I'll look into the IPv4 Tunnel Network box.
        I did change the route to push"route 10.33.127.0 255.255.255.0" but got the same outcome.

        Thank you.

        1 Reply Last reply Reply Quote 0
        • N
          noplan
          last edited by Apr 14, 2020, 3:25 PM

          the only IPs you have to set in openVPN Server are here (and afaik no where else)

          413ca79f-87d0-4dde-ae20-3dc1fd2cf918-grafik.png

          ec3b8b0c-cc82-47ed-ba44-84e0db7de29f-grafik.png

          e4c202cd-0704-4dcd-8d44-c8fc020d05f4-grafik.png

          show the config of your setting openVPN (screenShot) and of client specific override

          V 1 Reply Last reply Apr 14, 2020, 3:41 PM Reply Quote 0
          • V
            Vlee @noplan
            last edited by Apr 14, 2020, 3:41 PM

            @noplan Ah maybe that's my issue. I haven't set a DNS or NTP Server
            This is what i Have as my ipv4 tunnel network 289479d5-54a1-4188-977c-206583e3714c-image.png

            1 Reply Last reply Reply Quote 0
            • N
              noplan
              last edited by Apr 14, 2020, 3:46 PM

              dns is nice
              ntp not nescessary

              my point was that you do not need more IPs than those

              out of the blue is your openVPN tunnel workin without client spec override ?

              what is workin and what is the issue ?

              V 1 Reply Last reply Apr 14, 2020, 3:49 PM Reply Quote 0
              • V
                Vlee @noplan
                last edited by Apr 14, 2020, 3:49 PM

                @noplan
                Thanks for the info.
                I've never worked with client spec override. I am trying to set it up.
                The issue is that when I go to save what I enter it seems to go missing.
                If I go back to look at the changes I save, it is empty under the Client Specific Overrides tab.
                Is that normal?

                0e7095ba-ace0-49c2-801f-9688bf8637e1-image.png

                1 Reply Last reply Reply Quote 0
                • N
                  noplan
                  last edited by Apr 14, 2020, 4:00 PM

                  only things to choose n use for qnD
                  pre requirements (ad user and cert are all done and a client can connect and openVPN is wrokin)

                  7abb5926-49da-4183-85ce-3aec6a1d7006-grafik.png
                  6f8f681e-a835-4c53-87c7-68662da8f272-grafik.png

                  put here the IP for the override in CIDR format
                  d2c47ebc-42af-40eb-bc57-dfd265a442e6-grafik.png

                  optional depends on your settings
                  10105180-0135-4ec5-ae10-80484138a984-grafik.png

                  e44b276d-62ff-41b2-a77d-ad3e0aa1526f-grafik.png
                  0a643083-6545-4f0b-900d-cd05387affc4-grafik.png

                  if you believe me that i#m right if not not nescessary to fill some in
                  bb81636e-43df-4169-96db-8172cea7a50a-grafik.png

                  1 Reply Last reply Reply Quote 0
                  • R
                    Rico LAYER 8 Rebel Alliance
                    last edited by Rico Apr 14, 2020, 4:28 PM Apr 14, 2020, 4:28 PM

                    Whops, sorry to say I told you the wrong CSO box (already had my 10 hrs workday ;-)). Correct is IPv4 Local Network/s and NOT IPv4 Tunnel Network.
                    But mostly you would define the networks/routes to push in the Server configuration.

                    -Rico

                    1 Reply Last reply Reply Quote 0
                    • N
                      noplan
                      last edited by Apr 14, 2020, 5:14 PM

                      @Rico
                      word! i do not need to unserstand why i would do this ;)
                      CSO local networks but here in ausrtia a lot of things are possible ;)

                      1 Reply Last reply Reply Quote 0
                      13 out of 13
                      • First post
                        13/13
                        Last post
                      Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.
                        This community forum collects and processes your personal information.
                        consent.not_received