Navigation

    Netgate Discussion Forum
    • Register
    • Login
    • Search
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search

    OpenVPN Pf-Sense <-> Unifi Dream Machine Pro

    OpenVPN
    2
    3
    146
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • T
      tpensel last edited by

      Hi there,

      i would like to connect my Unifi Dream Machine Pro (UDMP) to an existing PF-Sense via OpenVPN. The VPN Server shall be on the Side of the PF-Sense. UDMP connects to home Network which is handled by a Telekom Speedport Smart 3 (i cannot change this one due to construction and Telekom entertain Service for TVs) so the WAN Port is connected to the Speedport via fixed internal IP.

      Till now i tried a lot but the UDMP does not even seem to connect to the Server von PF-Sense (i see nothing in the logs the Pf-Sense)

      alt text

      DaddyGo 1 Reply Last reply Reply Quote 0
      • DaddyGo
        DaddyGo @tpensel last edited by

        @tpensel said in OpenVPN Pf-Sense <-> Unifi Dream Machine Pro:

        but the UDMP does not even seem to connect to the Server von PF-Sense

        Hi,

        by the time you get out of the UDMP you will need to forward the port(s) multiple times... it's not lucky situation

        as I understand it, it is a dual-NAT or...., ++++ public..... / 192.... / 10......
        make the port forwarding settings on Speedport + UDMP

        (is the pfSense also in dual-NAT? (Vigor in bridge mode or not? - 192.168.38.1 is LAN or WAN IP?, may be LAN)

        use this pls.:
        https://docs.netgate.com/pfsense/en/latest/packages/openvpn-client-export.html

        and take the initiative test from here 10.100.1.x OVPN client and monitor the logs after
        https://openvpn.net/community-downloads/
        (if this works, you can proceed to configure the UDMP OVPN client)

        BTW:_
        I don't understand why you are using this 10.x.y.z range (RFC1918) this is unnecessary...
        (it is a home network not an office with 4000 - 8000 clients) 😉

        T 1 Reply Last reply Reply Quote 0
        • T
          tpensel @DaddyGo last edited by

          @daddygo

          192.168.38.1 is LAN IP
          The PF-Sense is connected via a DynDNS Name

          10.x.y.z is nessesary cause we are running a bunch of offices - 192.x.x.x does no longer serve us. We are changing all up to 10.X.Y.Z but till everything is up I need to connect the old firewalls with the new ones :-) Later on everything will be changes to 10.x.y.z :-)

          1 Reply Last reply Reply Quote 0
          • First post
            Last post

          Products

          • Platform Overview
          • TNSR
          • pfSense Plus
          • Appliances

          Services

          • Training
          • Professional Services

          Support

          • Subscription Plans
          • Contact Support
          • Product Lifecycle
          • Documentation

          News

          • Media Coverage
          • Press
          • Events

          Resources

          • Blog
          • FAQ
          • Find a Partner
          • Resource Library
          • Security Information

          Company

          • About Us
          • Careers
          • Partners
          • Contact Us
          • Legal
          Our Mission

          We provide leading-edge network security at a fair price - regardless of organizational size or network sophistication. We believe that an open-source security model offers disruptive pricing along with the agility required to quickly address emerging threats.

          Subscribe to our Newsletter

          Product information, software announcements, and special offers. See our newsletter archive to sign up for future newsletters and to read past announcements.

          © 2021 Rubicon Communications, LLC | Privacy Policy