NordVPN and pfsense 23.05.1 on 1100 (tunneling)

davidstoll

I get this error (I can supply more, but I think this is a good start):

write UDPv4: No route to host (fd=6,code=65)

I used this process:
https://support.nordvpn.com/Connectivity/Router/1626958942/pfSense-2-5-Setup-with-NordVPN.htm

The tunneling interface shows a red arrow down. Can someone help me through troubleshooting this?

CyberMinion

Have you verified that the hostname/IP of the VPN endpoint is reachable? I.e., have you tried pinging it from your device, or better yet, from the firewall?

davidstoll

Good question, while I didn't previously ping it, I did connect to the endpoint using the proprietary VPN software on my phone, but to answer your question directly....

[23.05.1-RELEASE][admin@pfSense.localdomain]/root: ping us5091.nordvpn.com
PING us5091.nordvpn.com (84.17.41.155): 56 data bytes
64 bytes from 84.17.41.155: icmp_seq=0 ttl=52 time=61.648 ms
64 bytes from 84.17.41.155: icmp_seq=1 ttl=52 time=61.686 ms
64 bytes from 84.17.41.155: icmp_seq=2 ttl=52 time=61.825 ms
64 bytes from 84.17.41.155: icmp_seq=3 ttl=52 time=61.420 ms
64 bytes from 84.17.41.155: icmp_seq=4 ttl=52 time=61.792 ms
^C
--- us5091.nordvpn.com ping statistics ---
5 packets transmitted, 5 packets received, 0.0% packet loss
round-trip min/avg/max/stddev = 61.420/61.674/61.825/0.143 ms

CyberMinion

@davidstoll Ah, alright I just wanted to make sure. Beyond that, I have a feeling I would need to see logs to better understand what it going on. IS this error being reported in the pfSense UI? Or is that a log entry?

davidstoll

@CyberMinion That was just a manual ping from ssh. The 1100 is a little underpowered (CPU-wise), so I've noticed it can take several minutes, but sometimes it will start working. Other times, it gets hung up and won't connect. So, I believe maybe my settings are correct, but it is just a little slow to get going, plus sometimes it just has trouble and reloading the process or rebooting fixes it, but it's not very quick, so it's just difficult to troubleshoot....?

My 4100 is instantaneous and works every time. I recently also reflashed/upgraded my 1100 to see if that would help, but again, I think part of the problem is that it is underpowered. Just switching between tabs/pages is a little slow, not terrible, but an indication of it's low resources.

I'm not trying to be critical, the 1100 works fine once you get everything set, but troubleshooting is a little tedious.