Openvpn Rules Tab

JJ5588

I'm starting to setup an openvpn pfsense client and openvpn pfsense server. On the rules page, I see 3 tabs:

openvpn tab
openvpn client tab
openvpn server tab

If I am setting up rules for the client and server I would apply rules to their specific tab. What is the other openvpn rules tab to be used for?

viragomann

@jj5588 said in Openvpn Rules Tab:

openvpn client tab
openvpn server tab

You get these tabs, when you assign an interface to an OpenVPN instance.
Rules on these tabs are only applied to the respective instance.

openvpn tab

This one is added automatically by pfSense when you fire up an OpenVPN instance, either a server or a client. You cannot delete it.
This is an interface group which includes all OpenVPN instances running on pfSense. Hence rules here are applied to all OpenVPN instances.

Consider that rules on interface groups are probed before rules on interface tabs. If one matches, no more rules are checked.
So to separate your OpenVPN instances it is highly recommended to have no rule on the OpenVPN tab and configure all needed ones on the interface tabs.

JJ5588

@viragomann this makes a lot of sense. Thank you for the information!