New OpenVPN says connected, but no traffic
-
Hi,
I created a new OpenVPN setup. The client is an Iphone. Everything says I'm connected, but I see nothing in the Firewall logs, nothing in DHCP leases, and pfSense says my public ip is different from what whatsmyip says. Shouldn't I be getting an IP from the Router/Firewall? I also see no traffic at all.
Any help is appreciated!
-
@duvel said in New OpenVPN says connected, but no traffic:
Everything says I'm connected, but I see nothing in the Firewall logs,
In Status > OpenVPN the client is displayed as connected and it has a virtual IP?
nothing in DHCP leases
You get an IP from OpenVPN, not from the DHCP.
and pfSense says my public ip is different from what whatsmyip says.
On the phone?
If you want to route all upstream traffic over the VPN you have to check "Redirect gateway" in the server settings.
Also you need an outbound NAT rule on WAN for the tunnel network. If you went through the wizard, it should be added automatically. But verify the automatic rules. If there is none, you have to switch to hybrid mode and add it manually. -
Thanks for the reply,
Yes, Status-OpenVPN says I'm connected with a Virtual IP.
I checked "Redirect IPv4 Gateway", and now whatsmyip reports the IP of pfSense, although pfSense still reports a public IP that is different from what whatsmyip says.
I now see the OpenVPN assigned address in the firewall logs.
What is the strange IP that OpenVPN reports as my public IP?
-
@duvel said in New OpenVPN says connected, but no traffic:
What is the strange IP that OpenVPN reports as my public IP?
It's the public IP, the OpenVPN server sees. That's might be an IP of your phone ISP.
But since all your upstream traffic goes through the VPN, destination sites in the internet see the public IP of pfSense. -
Why in "Interface Assigments" is the VPN listed as "available network port" instead of a regular interface like the rest?
-
@duvel
Network ports have to be assigned to usable interfaces at first. This is also true for the rest.When you install pfSense, the first set up step is to assign WAN and LAN and maybe other interfaces. You have to state the respective network port for the interfaces.
After firing up a VPN instance, pfSense gives you a new network port, which can be assigned to a certain interface. But this is only needed for some use cases.