pfsense openvpn tunnelling issue

hardikpfsense

Hello,

We have pfsense at our office and we want to allow people to use openvpn via pfsense to access office network( all systems are ubuntu based and uses latest ubuntu 20.04). Office network is set in format 192.168.1.1/24. Now people are able to connect using pfsense with our current settings to our network but they don't get the dns correctly. What i mean by dns is we have servers in our internet that can be only access by office static ip. and when they join they don't get the office ip so they are not able to access servers.

our openvpn settings are below,
IPv4 tunnel network : 10.0.8.0/24
IPv4 Local network : 192.168.1.0/24

in advanced client settings we have enabled following,
DNS Default Domain : checked ( Provide a default domain name to clients )
DNS Server enable : checked
DNS Server 1 : 192.168.1.1

Now from documentation we read that to do what we want to do we tried to set IPV4 to : 192.168.1.0/24 and foced
Redirect IPv4 Gateway using checkbox in tunnel settings. when we do this clients are able to connect but they can't access internet for some reason. with current settings they can access internet and for now we have enabled sshuttle tunnels so they get office ip but as it turns out sshuttle is buggy and have issues every now and then. so my question is how do i ensure people get office ip and access internet servers via openvpn.

attached is all openvpn settings + sample client file we are using. please let me know what i am missing as i have gone through pfsense document and stuck here.

open vpn settings :
setting - 1
setting - 2
setting - 3
setting - 4
setting - 5

client file

viragomann

@hardikpfsense said in pfsense openvpn tunnelling issue:

Now from documentation we read that to do what we want to do we tried to set IPV4 to : 192.168.1.0/24 and foced
Redirect IPv4 Gateway using checkbox in tunnel settings.

Where did you read this?

It is sufficient to add the subnets where your internal services resides to the "Local networks" in the OpenVPN server settings.

"Redirect gateway" forces the whole clients upstream traffic over the VPN. Is that what you really wan?
Can the clients access your services with that option?