• Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login
Netgate Discussion Forum
  • Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login

Second OpenVPN server instatance with different subnet

Scheduled Pinned Locked Moved OpenVPN
7 Posts 2 Posters 1.2k Views
Loading More Posts
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • F
    frooop
    last edited by Dec 4, 2014, 10:27 AM

    I have one OpenVPN Server running that works fine. It showed up in the firewall rules tab immediatly after i created the server.

    I know added another OpenVPN instance on a different port with different settings. I want to set firewall rules for that vpn too, but it doesn't show up in the firewall rules tab.

    The connection to this new vpn works, but since I can't allow any traffic, it is kind of useless to me right now.

    What would be the correct way to add firewall rules to this second OpenVPN?

    1 Reply Last reply Reply Quote 0
    • J
      johnpoz LAYER 8 Global Moderator
      last edited by Dec 4, 2014, 1:02 PM

      I run 2 instances, one on tcp the other on udp.  So tcp uses 10.0.8 and udp uses 10.0.200 for network ranges.  What sort of rules are you trying to do?  I have my openvpn tab rule wide open with any any.  But be happy to test some rules on my setup.

      An intelligent man is sometimes forced to be drunk to spend time with his fools
      If you get confused: Listen to the Music Play
      Please don't Chat/PM me for help, unless mod related
      SG-4860 24.11 | Lab VMs 2.7.2, 24.11

      1 Reply Last reply Reply Quote 0
      • F
        frooop
        last edited by Dec 4, 2014, 1:07 PM

        Well, I have one instance running on port 1194 and one on 1195. Both are using UDP. And I also have the any/any rule in my OpenVPN tab. But my second VPN (the one on port 1195, doesn't get routed. The other one works fine.

        1 Reply Last reply Reply Quote 0
        • J
          johnpoz LAYER 8 Global Moderator
          last edited by Dec 4, 2014, 1:11 PM

          I run tcp 443, and udp 1194..  Both work, so your client doesn't get the routes for your local lan segments when it connects?  I leave for work in about an hour, and can provide some details of the client connecting to both and what routes it gets, etc.

          I would guess you prob have something missing in the config.  Or conflicting networks on one of the instances maybe?

          An intelligent man is sometimes forced to be drunk to spend time with his fools
          If you get confused: Listen to the Music Play
          Please don't Chat/PM me for help, unless mod related
          SG-4860 24.11 | Lab VMs 2.7.2, 24.11

          1 Reply Last reply Reply Quote 0
          • F
            frooop
            last edited by Dec 4, 2014, 1:42 PM

            You seem to be right. On the working vpn i get these route::

            10                 10.253.0.9         UGSc            1        0   utun0
            10.253.0.1/32      10.253.0.9         UGSc            0        0   utun0
            10.253.0.9         10.253.0.10        UH              3        0   utun0
            

            on the "not working" vpn:

            10.252.0.1/32      10.252.0.5         UGSc            1        2   utun0
            10.252.0.5         10.252.0.6         UH              1        0   utun0
            

            But the server instances seem to be configured the same way and the client configs look identical (except of the port number)

            1 Reply Last reply Reply Quote 0
            • F
              frooop
              last edited by Dec 4, 2014, 1:51 PM

              Argh. I found it. The IPv4 Local Network/s wasn't set for the second OpenVPN server.

              Thank you for getting me in the right direction :)

              1 Reply Last reply Reply Quote 0
              • J
                johnpoz LAYER 8 Global Moderator
                last edited by Dec 4, 2014, 2:59 PM

                Glad I could be of help..

                An intelligent man is sometimes forced to be drunk to spend time with his fools
                If you get confused: Listen to the Music Play
                Please don't Chat/PM me for help, unless mod related
                SG-4860 24.11 | Lab VMs 2.7.2, 24.11

                1 Reply Last reply Reply Quote 0
                7 out of 7
                • First post
                  7/7
                  Last post
                Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.
                  This community forum collects and processes your personal information.
                  consent.not_received