OpenVPN on virtual IP



  • Hi.
    I setted up an OpenVPN server on my pfSense 1.2.3 system.
    It is correctly working if I try to reach it using the WAN interface IP address, but I need OpenVPN to be used with one of the Virtual IPs configured in pfSense on the WAN interface.
    I added a rule to accept all connections to WAN subnet (which includes all Virtual IPs) to UDP/TCP port 1194 but it does not connect, and I have no blocked packets in the firewall logs.

    Could you help me please?

    Thank you very much!
    Bye.


  • Rebel Alliance Developer Netgate

    In the custom options box, put in:

    local x.x.x.x

    Where x.x.x.x is the VIP you want it to listen on. It will need to be a CARP VIP, though, in order for pfSense to bind services to it.

    Alternately, attach the OpenVPN instance to the LAN interface, and use a port forward to direct the traffic to it, which would allow you to use a Proxy ARP or 'other' type VIP.



  • Thank you very much, now it works.
    The OpenVPN connection is working good, but after connecting the client cannot access to the LAN.
    I checked the firewall rules and they seems to be OK (if LAN, protocol any, source 192.168.252.0/24, destination LAN subnet, PASS) and I allowed all traffic on the OVPN interface.
    No blocked packets are logged in the firewall logs.

    Could you help me please?



  • I found a detail.
    If I attach OpenVPN to the WAN interface IP address (and not to one of the virtual IPs on the WAN interface) all trafic from clients work.


Locked