Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    pfsense to Gl-X750 OpenVPN issues

    Scheduled Pinned Locked Moved OpenVPN
    2 Posts 1 Posters 628 Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • S
      surfdude1009
      last edited by

      I am trying to setup a VPN between a pfsense (HQ) box and a GL-x750 (remote). I have basic connectivity over the tunnel – on the remote side I can browse the web and appear as if I am coming from HQ (whatsmyip on device connected to remote side shows IP of HQ). The issue is that I cannot get traffic from HQ to the remote site. pfsense does not see the remote network in its routing table. If I try to add a static route to the remote site there is no interface for me to point it to. If I try to create the tunnel as an interface it blackholes all traffic and I have to restore previous config.

      I am following this guide - https://medium.com/@oliverswitzer_91379/how-to-mining-helium-over-a-cellular-connection-updated-10-23-21-60d42fc07c74 as this is what I need to do but am using pfsense as the HQ. On the remote side I have enabled “Access Local Network” on the GL-x750 device.

      I have an allow any, any, any rule on the OpenVPN interface
      I have the appropriate rules to allow the tunnel (the tunnel is up and works)

      I am open to also trying Wireguard but have not been able to even get the tunnel up with that thus far.

      Below is the config portion of the client export from pfsense that worked when I imported it into the GL-x750:
      dev tun
      persist-tun
      persist-key
      data-ciphers AES-128-GCM:CHACHA20-POLY1305:AES-256-GCM:AES-256-CBC
      data-ciphers-fallback AES-256-CBC
      auth SHA256
      tls-client
      client
      resolv-retry infinite
      remote 1.2.3.4 1194 tcp4
      lport 0
      verify-x509-name "name.com" name
      remote-cert-tls server

      S 1 Reply Last reply Reply Quote 0
      • S
        surfdude1009 @surfdude1009
        last edited by

        Anyone?

        1 Reply Last reply Reply Quote 0
        • First post
          Last post
        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.