RW profiles Openvpn (AWS)

thekow

Hi! Has anyone got a good guide for AWS and RW pfsense openvpn configuration?
I am an openvpn newbie! I followed a guide on the web and it ended up killing my ec2 because the openvpn stopped at boot to ask for a auth password. I started from scratch but there is a few different guides and methods so I am wondering which is the best.

The one I did ended up following server certs and client certs and a user and pass in the openvpn client and adding a local user on pfsense. I think the issue come when i started a second client.

What I need is people from the net (up to about 10) to be able to login on via openvpn to the lan net to a single server. I had it working until i rebooted and it asked for a pass.
I guess i would need each person to have a login not a massive deal if not.

I don't want to screw up with openvpn stopping the ec2 again as there's no way to put in keyboard commands on aws boot.

Rico

Can you draw up your network layout here? Maybe it's just me, but I don't understand what exactly you are doing.
If you have just one pfSense Instance running in AWS as OpenVPN RAS there is no reason it could ask for User/PW at booting. Only if pfSense is acting as OpenVPN Client.
But as said, I don't understand how your stuff is connected atm and what exactly you are trying to do.

-Rico

thekow

Basically want a machine Internet to login to openvpn and be able to access the private machine. I used the RW guide to set it up. It worked fine. Then when i rebooted the pfsense it asked for an auth password even though i set it up in the pfsense.
As its AWS it bricked the machine as there is no way to type anything at boot time.
Would like a way to know which person is logging in.

Network

I will try again with a local instance of the openvpn so if it does it again i can at least recover it without a long winded recovery of the drive

Rico

I'd use the official documentation, there is a lot of really good stuff around for Remote Access VPNs.
https://docs.netgate.com/pfsense/en/latest/book/openvpn/using-the-openvpn-server-wizard-for-remote-access.html
https://docs.netgate.com/pfsense/en/latest/vpn/openvpn/openvpn-remote-access-server.html
https://www.netgate.com/resources/videos/remote-access-vpns-on-pfsense.html
https://www.netgate.com/resources/videos/remote-access-vpns-on-pfsense-part-2.html

-Rico