OpenVPN on virtual IP
-
Hi.
I setted up an OpenVPN server on my pfSense 1.2.3 system.
It is correctly working if I try to reach it using the WAN interface IP address, but I need OpenVPN to be used with one of the Virtual IPs configured in pfSense on the WAN interface.
I added a rule to accept all connections to WAN subnet (which includes all Virtual IPs) to UDP/TCP port 1194 but it does not connect, and I have no blocked packets in the firewall logs.Could you help me please?
Thank you very much!
Bye. -
In the custom options box, put in:
local x.x.x.x
Where x.x.x.x is the VIP you want it to listen on. It will need to be a CARP VIP, though, in order for pfSense to bind services to it.
Alternately, attach the OpenVPN instance to the LAN interface, and use a port forward to direct the traffic to it, which would allow you to use a Proxy ARP or 'other' type VIP.
-
Thank you very much, now it works.
The OpenVPN connection is working good, but after connecting the client cannot access to the LAN.
I checked the firewall rules and they seems to be OK (if LAN, protocol any, source 192.168.252.0/24, destination LAN subnet, PASS) and I allowed all traffic on the OVPN interface.
No blocked packets are logged in the firewall logs.Could you help me please?
-
I found a detail.
If I attach OpenVPN to the WAN interface IP address (and not to one of the virtual IPs on the WAN interface) all trafic from clients work.
