Open VPN connection to secondary interface on pfsense box.



  • I am using embedded 1.2.
    It is a basic client-server connection.
    I am able to connect to the primary interface just fine, however when I attempt to move it to our secondary interface(it has a much higher upstream) it fails with this error from the open vpn server log. As far as I can tell I have both firewall rules the same as it is definitely making the connection. I have even used the same FW rule and just changed the interface from the primary to the secondary to confirm this.

    Jul 9 12:28:47 openvpn[8578]: xxx.xxx.xxx.xxx:xxxxx TLS Error: TLS handshake failed
    Jul 9 12:28:47 openvpn[8578]: xxx.xxx.xxx.xxx:xxxxx TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
    Jul 9 12:28:43 openvpn[8578]: xxx.xxx.xxx.xxx:xxxxx TLS Error: TLS handshake failed
    Jul 9 12:28:43 openvpn[8578]: xxx.xxx.xxx.xxx:xxxxx TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
    Jul 9 12:28:05 openvpn[8578]: xxx.xxx.xxx.xxx:xxxxx TLS Error: TLS handshake failed
    Jul 9 12:28:05 openvpn[8578]: xxx.xxx.xxx.xxx:xxxxx TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)

    $ netstat -an | grep 1194 results this, but we just cant get it to go through. Is there a way to bind it to a specific interface? Or maybe it is a gateway issue?
    udp4      0      0  *.1194                .

    If anyone has any ideas, it would be much appreciated.

    Thanks,

    John



  • Just replying with what fixed it. It was as simple as adding "local 2ndexternalipaddress" as a custom option.


Log in to reply