OpenVPN does not work on bridged PFsense router

[george1116]

@JonathanLee

yes, I am using pfsense for OpenVPN. By default, it accepts all UDP connections on the WAN port.

Also, this is what part of my config file looks like, it is already setup like yours.

[JonathanLee]

@george1116 change it to just udp and save it import it and try again

[george1116]

@JonathanLee

Please help me understand, what am I changing to UDP only. it's already set to only use UDP, so I am a little confused right now.

[JonathanLee]

@george1116 it says udp4 that is upd ipv4 some systems cannot understand it like my iphone it just wants it to say udp.

[george1116]

@JonathanLee

Modified and it didn't work either

still failing at

2024-01-03 09:53:25.497694 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
2024-01-03 09:53:25.497766 TLS Error: TLS handshake failed

[viragomann]

@george1116
What shows the server log?

[JonathanLee]

@george1116 dang

[JonathanLee]

@george1116 Hold on ...

@george1116 said in OpenVPN does not work on bridged PFsense router:

I then installed openVPN on my pfsense router, but when I am connected directly to my home router (the bridged router) openVPN is not able to connect, however, when I connect via tethering to my mobile device hotstpo OpenVPN connects successfully.

Are you attempting to connect while you are on the private network that has pfSense??

That won't work if that is what you are doing, this is for when you are not home and want to access your NAS or home network.

Are you connected to your hotspot on your laptop? And this works?

After you test connected to your LAN and VPN to your device correct and this is when it fails?

If this is the case, you need a rule for your LAN to route that traffic you want for your VPN too, right now it is set up for WAN VPN access..

Example: ( I am working on a Java program at home it's huge I debug it at work and or school and I want to work on the same file so I have it saved on my NAS, I access my VPN and work on that same file remotely on the NAS)

[george1116]

@viragomann Same error from the server

[viragomann]

@george1116
The client tries to connect via IPv6.
Is this, what you intend?

[george1116]

@JonathanLee

No not at all, I just wanted to paint a picture of my setup.

I am attempting to connect while on my home router wifi, the LAN port from that modem-router is bridged and I have pfsense connected to the LAN port.

[JonathanLee]

@george1116 it's an IPV6 issue see it in the logs....Do you have that enabled in pfsense?

Change it to upd6 see if that works it was set to udp4 but upd should have set it to auto

[george1116]

@viragomann We changed the remote mode to udp so it makes sense that it's trying to connect with ipv6 and ipv4.

[viragomann]

@george1116
The protocol has nothing to do with the IP version.
Is the server even configured for IPv6?

Just try to connect to the IPv4 to see if it makes a difference.

[JonathanLee]

@viragomann I had him set it from udp4 to just udp to test it was not working with udp4 on the client export file

[JonathanLee]

@george1116

Is your OpenVPN set like this?

[viragomann]

@JonathanLee
If the client config file only has an IPv4 remote line, it would use it, but not IPv6.

I guess, he has an host name in the remote line and the internal DNS resolves it to IPv6.

[george1116]

@JonathanLee

I changed it from that to this

<br/>

[JonathanLee]

@viragomann He could create a host override for it right?

[JonathanLee]

@george1116 is your wan have ipv6 listed under status in pfsense?

I am thinking set that to ipv4 only and test again