Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    OpenVPN + OS X Leopard + Shimo Problems

    Scheduled Pinned Locked Moved OpenVPN
    3 Posts 2 Posters 3.5k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • N
      NeeleSteele
      last edited by

      I've been reading the posts, and trying to figure out where my issue lies, but its time to turn to you guys :-)

      I have a Pfsense running at home and decided to move from having port 22 open from my office, to just having a VPN I can use anywhere…  I followed the tutorials listed here and progressed onto connectiong w/o any issues.

      I am running OS X 10.5.7 on a MBP and using Shimo (http://www.shimoapp.com/) to connect.  I've been using Shimo for years to connect to my Cisco Concentrator at the data center and noticed it supports a lot more VPNs, IPSec, OVPN, etc.

      I can connect successfully, but cannot connect/ping/ssh/ftp/http to anything, zero connection :-(

      Here is my configuration:

      PFSense:
      LAN = 192.168.10.1 (192.168.10.0/24)

      OpenVPN Server Config:

      Protocol: UDP
      Dynamic IP: Checked
      Local Port: 1194
      Address Pool: 192.168.200.0/24
      Local Network: 192.168.10.0/24
      Crypto: BF-CBC (128-bit) (DEFAULT)
      Authentication Method: PKI

      All the correct keys are pasted in.

      Firewall Rules:

      LAN:

      PASS
      Protocol *
      Source 192.168.200.0/24
      Source Port *
      Destination: (Tried both LAN net & *)
      Gateway *

      WAN:

      PASS
      Protocol UDP
      Source *
      Source Port *
      Destination *
      Destination Port 1194 (OpenVPN)
      Gateway *

      Shimo is configured with OpenVPN, and TUN, Certs/Keys & IP. And reconnect of 30 seconds.
      I receive no errors on the Mac and actually see myself connected on the PFSense:

      Jun 12 10:39:31 openvpn[35940]: 75.251.218.188:49207 [client-macbookpro-windows] Peer Connection Initiated with 75.251.218.188:49207
      Jun 12 10:40:32 openvpn[35940]: 75.251.218.188:49208 Re-using SSL/TLS context
      Jun 12 10:40:34 openvpn[35940]: 75.251.218.188:49208 WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1541', remote='link-mtu 1542'
      Jun 12 10:40:34 openvpn[35940]: 75.251.218.188:49208 WARNING: 'comp-lzo' is present in remote config but missing in local config, remote='comp-lzo'
      Jun 12 10:40:35 openvpn[35940]: 75.251.218.188:49208 [client-macbookpro-windows] Peer Connection Initiated with 75.251.218.188:49208

      And here's the output of a netstat on my MBP:

      Destination        Gateway            Flags    Refs      Use  Netif Expire
      default            66.174.XXX.XXX      UGSc      94      11  ppp0
      66.174.XXX.XXX      75.251.XXX.XXX    UH        95        3  ppp0
      75                ppp0              USc        5        0  ppp0
      127                127.0.0.1          UCS        0        0    lo0
      127.0.0.1          127.0.0.1          UH          6    1628    lo0
      192.168.10        192.168.200.5      UGSc        1      785  tun0
      192.168.200.1/32  192.168.200.5      UGSc        0        0  tun0
      192.168.200.5      192.168.200.6      UH          3        0  tun0

      Internet6:
      Destination                            Gateway                        Flags      Netif Expire
      ::1                                    link#1                          UHL        lo0
      fe80::%lo0/64                          fe80::1%lo0                    Uc          lo0
      fe80::1%lo0                            link#1                          UHL        lo0
      ff01::/32                              ::1                            U          lo0
      ff02::/32                              ::1                            UC          lo0

      I think I've provided about all the info I can, any help on this would be GREATLY appreciated.

      Thanks,

      Neil.

      1 Reply Last reply Reply Quote 0
      • AhnHELA
        AhnHEL
        last edited by

        Check your LZO compression setting, your logs are complaining that LZO compression is enabled only on one side of your tunnel.

        Same with MTU, mismatched settings.  Not familiar with Shimo so check your settings there match your pfSense OVPN settings

        AhnHEL (Angel)

        1 Reply Last reply Reply Quote 0
        • N
          NeeleSteele
          last edited by

          You're the man! I had (in Shimo) Compression set to Disabled, and changed it to "Never" and somehow that fixed it…. go figure :-)

          Thanks!

          1 Reply Last reply Reply Quote 0
          • First post
            Last post
          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.