Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Options error: –local and --nobind don't make sense when used together.

    Scheduled Pinned Locked Moved OpenVPN
    5 Posts 2 Posters 14.5k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • B
      brick41
      last edited by

      I am using a just installed pfSense version 2.1.2-RELEASE (amd64). I'm using the OpenVPN client in pfSense to connect to my VPN provider Private Internet Access (PIA). I've noticed that most directions for connecting to PIA don't have the "nobind" option, but PIA's own directions do. Here are the options they have for pfSense:

      nobind
      auth-user-pass /etc/openvpn-password.txt
      comp-lzo
      ca /etc/ca.crt
      

      When I have nobind the OpenVPN log says:
      Options error: –local and --nobind don't make sense when used together.

      The only thing I could find was a bug about it from four years ago that was resolved:
      Bug #282: OVPN, –nobind and --local port conflict - pfSense - pfSense bugtracker

      Can someone explain what nobind does and if attempting to use both is a bug in pfSense? nobind is good because it randomizes the UDP port and also allows multiple OpenVPN connections right? Thanks

      1 Reply Last reply Reply Quote 0
      • C
        cmb
        last edited by

        OpenVPN itself doesn't let you use both. We use local for a variety of reasons to bind to a specific local IP (though you can put "any" in the interface field to disable that). The way we use –local, it always uses a random source port, and you don't want nobind.

        1 Reply Last reply Reply Quote 0
        • B
          brick41
          last edited by

          @cmb:

          OpenVPN itself doesn't let you use both. We use local for a variety of reasons to bind to a specific local IP (though you can put "any" in the interface field to disable that). The way we use –local, it always uses a random source port, and you don't want nobind.

          Ok so I don't want nobind, but can you clarify does that mean I don't want bind either instead of local? That seems to be what you're implying but I don't want to misinterpret. I appreciate the help.

          1 Reply Last reply Reply Quote 0
          • C
            cmb
            last edited by

            Choose the WAN interface you want it to use in the Interface drop down, and don't specify nobind, that'll give you what you're looking for.

            1 Reply Last reply Reply Quote 0
            • B
              brick41
              last edited by

              @cmb:

              Choose the WAN interface you want it to use in the Interface drop down, and don't specify nobind, that'll give you what you're looking for.

              Ok that's what I have already so I will leave it as is. Thanks

              1 Reply Last reply Reply Quote 0
              • First post
                Last post
              Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.