• Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login
Netgate Discussion Forum
  • Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login

Openvpn client not using data channel offload

Scheduled Pinned Locked Moved OpenVPN
1 Posts 1 Posters 639 Views
Loading More Posts
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • M
    m4rv1n
    last edited by m4rv1n Apr 21, 2023, 10:13 AM Apr 21, 2023, 9:26 AM

    Hi everyone,
    I have two installation with pfsense 2.6.0 and openvpn server configured.
    Configuration is the same (at least from interface).

    From the same windows client, if I do connect to Server1, the client use OpenVPN Data Channel Offload adapter, and connection to vpn is very fast; if I do connect to Server2, the client use OpenVPN TAP-Windows6.

    Client config for server1 (the one that use data channel offload adapter)
    dev tun
    persist-tun
    persist-key
    cipher AES-128-CBC
    auth SHA1
    tls-client
    providers legacy default
    client
    resolv-retry infinite
    remote dnsnameofserver xxxx udp
    lport 0
    verify-x509-name "xxxxx" name
    auth-user-pass
    pkcs12 xxxxx-udp-xxxxx-xxxxx.p12
    tls-auth xxxxx-udp-xxxxx-xxxxx-tls.key 1
    ns-cert-type server
    keepalive 10 300
    tun-mtu 9000
    redirect-gateway def1
    push "redirect-gateway def1"

    Client config for Server2 (the one that use old tap6 adapter)
    dev tun
    persist-tun
    persist-key
    ncp-ciphers AES-128-GCM:AES-128-CBC
    cipher AES-128-CBC
    auth SHA1
    tls-client
    providers legacy default
    client
    resolv-retry infinite
    remote dnsnameofserver xxxx udp
    nobind
    verify-x509-name "xxxxx" name
    auth-user-pass
    pkcs12 xxxxx-xxxxx-xxxxx-xxxxx.p12
    tls-auth xxxxx-xxxxx-xxxxx-xxxxx-tls.key 1
    remote-cert-tls server
    explicit-exit-notify

    Am I missing something so that also the connection to Server2?
    Thanks

    EDIT: Two parameters in the configuration file can cause this behaviuor (connection to use the tap6)
    "ncp-ciphers" and "data-ciphers AES-128-GCM:AES-128-CBC"
    I removed these from configration and the connection is now working with data channel offload

    1 Reply Last reply Reply Quote 0
    1 out of 1
    • First post
      1/1
      Last post
    Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.
      This community forum collects and processes your personal information.
      consent.not_received