• Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login
Netgate Discussion Forum
  • Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login

OpenVPN interface assignment

Scheduled Pinned Locked Moved OpenVPN
openvpninterfaceclients
2 Posts 2 Posters 705 Views
Loading More Posts
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • S
    sparkman123
    last edited by sparkman123 Apr 16, 2020, 10:23 PM Apr 16, 2020, 10:22 PM

    In my current setup, I have several OpenVPN clients that are connected to remote servers from a subscription VPN,.

    When one specifies an OpenVPN specific interface under VPN -> OpenVPN -> Clients (in my case OPT1) I have noticed that this tends to be less stable than if I leave it as WAN.

    Specifically, if I want to get a new IP by restarting the connection, I have to restart the OpenVPN client for that instance twice for it to successfully start. Also, if I want to enable an interface that is currently disabled, the webGUI will throw an error stating that "An IPv4 protocol was selected, but the selected interface has no IPv4 address." Finally, when I look at the OpenVPN status (Status -> OpenVPN), the Local Address is blank.

    I am using NAT rules to ensure no spillover between the VPNs. I have noticed no change as to whether or not an interface is selected under the OpenVPN clients (WAN or OPTx).

    My question is, do I need to specify an interface under the OpenVPN Client settings? What benefit will I get if I do?

    Thanks.

    1 Reply Last reply Reply Quote 0
    • R
      Rico LAYER 8 Rebel Alliance
      last edited by Apr 17, 2020, 12:34 PM

      The interface used by the firewall to originate this OpenVPN client connection
      so typically this would be WAN.
      In my case for some Sites it is not directly WAN but some Gateway Group containing different WANs.
      I've never thought about switching it to any internal Interface like LAN or OPT...why did you do that? Just leave it as default.

      -Rico

      1 Reply Last reply Reply Quote 0
      1 out of 2
      • First post
        1/2
        Last post
      Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.
        This community forum collects and processes your personal information.
        consent.not_received