<![CDATA[Route Traffic via VPN]]>Dear All,
I'm plan to router all my traffic to VPN using OpenVPN which reach to INTERNET. Is this possible to do it on pfsense box. If yes, How to do it? Please keep some guideline. Thanks.

]]>https://forum.netgate.com/topic/160693/route-traffic-via-vpnRSS for NodeSat, 13 Jun 2026 08:52:36 GMTWed, 10 Feb 2021 08:33:19 GMT60<![CDATA[Reply to Route Traffic via VPN on Thu, 11 Feb 2021 05:50:39 GMT]]>@griffo said in Route Traffic via VPN:

https://docs.netgate.com/pfsense/en/latest/recipes/wireguard-client.html

The second choices is what I want. To route all outbound traffic to my VPN provider.

]]>https://forum.netgate.com/post/963032https://forum.netgate.com/post/963032Thu, 11 Feb 2021 05:50:39 GMT<![CDATA[Reply to Route Traffic via VPN on Thu, 11 Feb 2021 05:46:46 GMT]]>@peter_apiit Route it to where? Do you have a second site you want to use as the main internet exit point? e.g
https://docs.netgate.com/pfsense/en/latest/recipes/openvpn-s2s-route-internet-traffic.html

Or you want to hide all your internet traffic from whoever and use a commercial VPN provider?
https://docs.netgate.com/pfsense/en/latest/recipes/wireguard-client.html shows the general setup but you need to replace wireguard with OpenVPN

]]>https://forum.netgate.com/post/963031https://forum.netgate.com/post/963031Thu, 11 Feb 2021 05:46:46 GMT<![CDATA[Reply to Route Traffic via VPN on Thu, 11 Feb 2021 04:15:08 GMT]]>@griffo Is it possible to setup pfsense as server + client so that i can route all my traffic via tunnel network?

Is yes, any guide?

]]>https://forum.netgate.com/post/963026https://forum.netgate.com/post/963026Thu, 11 Feb 2021 04:15:08 GMT<![CDATA[Reply to Route Traffic via VPN on Thu, 11 Feb 2021 04:09:07 GMT]]>@peter_apiit That guide is to set up OpenVPN as a server so you can VPN into into your network over the Internet.
It sounds like you want to send all your outbound Internet traffic down a VPN, which means you need to set up pfsense as a Client connecting to a VPN provider.

]]>https://forum.netgate.com/post/963024https://forum.netgate.com/post/963024Thu, 11 Feb 2021 04:09:07 GMT<![CDATA[Reply to Route Traffic via VPN on Thu, 11 Feb 2021 04:00:00 GMT]]>@griffo I did not using any commercial VPN provider.

I reinstall the openvpn n connect successfully.

Questions:
How to ensure my traffic is encrypted to INTERNET?
I tried to check who ip but it shows my internet ip address.

]]>https://forum.netgate.com/post/963022https://forum.netgate.com/post/963022Thu, 11 Feb 2021 04:00:00 GMT<![CDATA[Reply to Route Traffic via VPN on Thu, 11 Feb 2021 03:54:10 GMT]]>@peter_apiit Are you using a commercial VPN provider? (NordVPN, Mullvad, Pure, PIA etc?) If so which one?

]]>https://forum.netgate.com/post/963021https://forum.netgate.com/post/963021Thu, 11 Feb 2021 03:54:10 GMT<![CDATA[Reply to Route Traffic via VPN on Thu, 11 Feb 2021 03:52:03 GMT]]>Thu Feb 11 11:49:45 2021 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Thu Feb 11 11:49:45 2021 TLS Error: TLS handshake failed
Thu Feb 11 11:49:45 2021 SIGUSR1[soft,tls-error] received, process restarting
Thu Feb 11 11:49:55 2021 TCP/UDP: Preserving recently used remote address: [AF_INET]175.144.174.251:51734
Thu Feb 11 11:49:55 2021 UDPv4 link local (bound): [AF_INET][undef]:0
Thu Feb 11 11:49:55 2021 UDPv4 link remote: [AF_INET]175.144.174.251:51734

I could not reconnect after disconnect. Don't know why.

]]>https://forum.netgate.com/post/963020https://forum.netgate.com/post/963020Thu, 11 Feb 2021 03:52:03 GMT<![CDATA[Reply to Route Traffic via VPN on Thu, 11 Feb 2021 02:40:23 GMT]]>I delete the previous configuration and now it works.

Questions:
How to ensure my traffic is encrypted to INTERNET?
I tried to check who ip but it shows my internet ip address.

]]>https://forum.netgate.com/post/963008https://forum.netgate.com/post/963008Thu, 11 Feb 2021 02:40:23 GMT<![CDATA[Reply to Route Traffic via VPN on Thu, 11 Feb 2021 02:01:39 GMT]]>I follow this guide.

https://stefanrows.medium.com/configure-openvpn-for-pfsense-2-4-the-complete-guide-64edc7278462

Thu Feb 11 09:57:16 2021 WARNING: Compression for receiving enabled. Compression has been used in the past to break encryption. Sent packets are not compressed unless "allow-compression yes" is also set.
Thu Feb 11 09:57:16 2021 OpenVPN 2.5.0 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] built on Oct 28 2020
Thu Feb 11 09:57:16 2021 Windows version 10.0 (Windows 10 or greater) 64bit
Thu Feb 11 09:57:16 2021 library versions: OpenSSL 1.1.1h 22 Sep 2020, LZO 2.10
Thu Feb 11 09:57:39 2021 TCP/UDP: Preserving recently used remote address: [AF_INET]27.122.12.236:50743
Thu Feb 11 09:57:39 2021 UDPv4 link local (bound): [AF_INET][undef]:0
Thu Feb 11 09:57:39 2021 UDPv4 link remote: [AF_INET]27.122.12.236:50743
Thu Feb 11 09:58:39 2021 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Thu Feb 11 09:58:39 2021 TLS Error: TLS handshake failed

This is the error log.

]]>https://forum.netgate.com/post/963003https://forum.netgate.com/post/963003Thu, 11 Feb 2021 02:01:39 GMT<![CDATA[Reply to Route Traffic via VPN on Thu, 11 Feb 2021 00:57:42 GMT]]>@dabbelju007 Any user guide I can follow.

]]>https://forum.netgate.com/post/962997https://forum.netgate.com/post/962997Thu, 11 Feb 2021 00:57:42 GMT<![CDATA[Reply to Route Traffic via VPN on Wed, 10 Feb 2021 10:41:24 GMT]]>@Peter_APIIT

Yes, it is possible.

Setup the openVPN Server on pfSense and check the redirect gateway function.

Scroll down to "Redirect IPv4 Gateway" or "Redirect IPv6 Gateway". Check the appropriated box for IPv4 and/or IPv6.

Reconnect on client side.

You can check if it works by using traceroute on client side.

Hope it helps
Dabbelju

]]>https://forum.netgate.com/post/962838https://forum.netgate.com/post/962838Wed, 10 Feb 2021 10:41:24 GMT