OpenVPN wont connect through WAN
-
I have OpenVPN setup and I can connect via my LAN, but not via the WAN. Its not a DDNS issue, as I cant connect via the WAN IP either. The connection on my client times out without connecting. In the firewall, I have the protocol, source, and destination set to "any" per someone else's suggestion. I have previously setup OpenVPN on other routers, but not on a pfSense box. The client log just shows "timeout", Any ideas what am I doing wrong here?
-
Do you enable traffic on the OpenVPN virtual interface?
-
How have you set the server to listen on both LAN and WAN?
Best way is to let it listen on WAN and add a port forwarding rule from LAN address to WAN address on LAN interface. -
I have OpenVPN>Server>Interface set to the WAN port.
How have you set the server to listen on both LAN and WAN?
Best way is to let it listen on WAN and add a port forwarding rule from LAN address to WAN address on LAN interface.Do you enable traffic on the OpenVPN virtual interface?
How do I check the above items? I am not sure how I set it up originally, and I may start fresh with the OpenVPN config.
Also I noticed something strange today - my WAN port (set to DHCP) does not have an IP address from my ISP (its showing 0.0.0.0). I can sucessfully ping the internet from the pfSense box and my computer, so I am not sure why this shows 0.0.0.0?
-
There is something not right with your setup in general if you've got a WAN address of 0.0.0.0 but can still access the internet from LAN.
Can you gives us a simple diagram of your setup?
Post your Firewall->Rules for WAN, LAN , OpenVPN and Status->Interfaces.
-
Thanks for the help so far- My setup is fairly simple:
Modem–>pfSense-->RouterI setup pfSense as a transparent firewall. I am still using my existing router, because I have lots of custom work in my Tomato router. I will post the other requested items as soon as I can login from my laptop.
-
Thanks for the help so far- My setup is fairly simple:
Modem–>pfSense-->RouterWhile it should be
Modem (bridge mode) -> pfSense
and you'd have no issue like this with settings things in 3 different places.