Pfsesne 2.7.0 OpenVPN Client connected, RDP Work OK BUT no internet access
-
Hello,
After OPEN VPN Connection, in the remote client PC the browser have no internet.
RDP Work OK. Inside RDP Internet is OK and mail and browser work OK.The problem is that Outside RDP, browse and mail have no internet.
My configuration is:
-
@Unoptanio
Seems, the browser cannot resolve host names.
Did you provide a DNS server in OpenVPN? If so and it's a public one, you need to add it to the "local networks". -
This post is deleted! -
@Unoptanio
So you provide public DNS servers. However, this has nothing to do with the DNS settings in pfSense. You could also provide any other server in the VPN.Normally the client pulls these settings and use the stated DNS servers, when the connection is established.
If you don't route them over the VPN, the client should access the DNS servers over its own upstream connection.
So I assume, there is an issue on the client side. Maybe the clients log give hints about the problem. -
https://docs.netgate.com/pfsense/en/latest/recipes/openvpn-s2s-route-internet-traffic.html
I'm reading this article but I don't understand how to fix my problem.
It seems to me that once you connect to the VPN there are two possibilities to use the internet:
-
use the local internet connection of the client PC
-
use the internet connection of the remote tunnel VPN server
I use VPN to use RemoteDesktop safely. But I would also like to use the browser on my client pc using the connection of the local client pc or possibly with that of the remote server via the vpn tunnel.
Currently every time I want to use the browser and email I have to disconnect from the vpn
I made this setting.
But it doesn't solve the problem: -
-
RESOLVED!!!!!!
I've gone crazy.
Enabling this item now works. I can access the internet (browser, email, etc) on the remote client pc while they are also connected in VPN with Remote Desktop
-
Tested by checking the public ip.
On the remote client pc, the internet goes out with the local connection of the pc and not with that of the remote OpenVpn tunnel.Do you know if it is possible to get it out with the remote VPN tunnel connection?
IPCONFIG in client pc:
-
@Unoptanio
Go into the OpenVPN server settings and add a check at "Redirect gateway".However, this also needs an outbound NAT rule on WAN for the source of the tunnel network. If you went through the wirzard, pfSense might have add it automatically, otherwise set outbound NAT back to hybrid mode and add the rule manually as you had it before.
-
-
if i check redirect ipv4 gateway then disappear ipv4 local network
-
@Unoptanio said in Pfsesne 2.7.0 OpenVPN Client connected, RDP Work OK BUT no internet access:
if i check redirect ipv4 gateway then disappear ipv4 local network
Yes, this is not needed anymore in this case.
It pushes the route for the local networks to the clients. Redirect gateway pushes the default route, i.e. any traffic is routed over the VPN. -
great thanks it works. Tested now.
with this change the internet use the remote tunnel -
The crucial setting that didn't make the internet work on the local pc but only the VPN was this
-
Performance:
Test speed under remote server openvpn on firewall pfsense: (1Gb optical fiber)
Test speed in remote pc client with OPEN VPN ON with internet routed on the remote server .......shouldn't it go faster?
Test speed in remote pc client with OPEN VPN OFF with internet on local PC
-
I propose : replace these :
with
where 192.168.3.1 is your tunnel IP, 10.10.94.1
If you unbound settings are default, you're good :
(All includes my OpenVPN server called SVPN)
as unbound also listens on 10.10.94.1, the OpenVPN server IP on the pfSense side.
Why ? Now you can use local URL/host names like server.XXXXpfSense.homa.arpa to join a RDP session on "server" on your LAN.
8.8.8.8 and others don't know anything about your local devices ;) -
HI,
that's what I've been trying to do for the last few hours. but at the moment I haven't succeeded yet.
I would like to use the computer name in RDP sessions instead
of the IP addressRDP session using PC NAME not work.
RDP session using ip address of PC work OK.
i changed the pfsense config like you saids:
-
I find this in "services", "DNS RESOLVER?"
I have not added the OPENVPN server in the interfaces.
and consequently does not appear in the DNS resolver list.
-
@Unoptanio
dou you have set firewall rules for the OpenVPN connection? -
@slu
the openvpn wizard entered them automatically -
@Unoptanio said in Pfsesne 2.7.0 OpenVPN Client connected, RDP Work OK BUT no internet access:
the openvpn wizard entered them automatically
no I mean internet access from your VPN client over the VPN into WAN.
That was your question, or?