<?xml version="1.0" encoding="UTF-8"?><rss xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:atom="http://www.w3.org/2005/Atom" version="2.0"><channel><title><![CDATA[Pfsense OpenVPN Server in the cloud – peer to peer with multiple clients]]></title><description><![CDATA[<p dir="auto">Hi all,</p>
<p dir="auto">I use the last PfSense version 2.2.4.</p>
<p dir="auto">I've deployed an PfSense VM in the cloud and I use it as an OpenVPN server.<br />
The Goal is to configure the maximum of the configuration in the cloud server.<br />
I used the Client Specific Overrides to send specific parameters to a specific client.</p>
<p dir="auto">From the Client LAN 192.168.13.0/24, I can ping all hosts from LAN Server<br />
From the Client LAN 192.168.15.0/24, I can ping all hosts from LAN Server</p>
<p dir="auto">From the Server LAN 192.168.43.0/24, I can ping all hosts from LAN Clients 13.0/24 &amp; 15.0/24.</p>
<p dir="auto">I would like now allow the communication between the Clients LAN 13.0 to 15.0 and vice versa.</p>
<p dir="auto"><strong>Here my Server configuration :</strong></p>
<p dir="auto">dev ovpns3<br />
verb 1<br />
dev-type tun<br />
dev-node /dev/tun3<br />
writepid /var/run/openvpn_server3.pid<br />
#user nobody<br />
#group nobody<br />
script-security 3<br />
daemon<br />
keepalive 10 60<br />
ping-timer-rem<br />
persist-tun<br />
persist-key<br />
proto udp<br />
cipher BF-CBC<br />
auth SHA1<br />
up /usr/local/sbin/ovpn-linkup<br />
down /usr/local/sbin/ovpn-linkdown<br />
local MYSERVERIP<br />
tls-server<br />
server 10.0.8.0 255.255.255.0<br />
client-config-dir /var/etc/openvpn-csc<br />
ifconfig 10.0.8.1 10.0.8.2<br />
tls-verify "/usr/local/sbin/ovpn_auth_verify tls 'SierraServer' 1 "<br />
lport 1194<br />
management /var/etc/openvpn/server3.sock unix<br />
push "route 192.168.43.0 255.255.255.0"<br />
route 192.168.13.0 255.255.255.0<br />
route 192.168.15.0 255.255.255.0<br />
ca /var/etc/openvpn/server3.ca<br />
cert /var/etc/openvpn/server3.cert<br />
key /var/etc/openvpn/server3.key<br />
dh /etc/dh-parameters.2048<br />
comp-lzo yes<br />
tun-mtu 1500<br />
mssfix 1400<br />
fragment 1300</p>
<p dir="auto"><strong>Here my CSO for client1 (192.168.13.0)</strong></p>
<p dir="auto">ifconfig-push 10.0.8.10 10.0.8.1<br />
push "route 192.168.43.0 255.255.255.0"<br />
push "route 192.168.15.0 255.255.255.0"<br />
iroute 192.168.13.0 255.255.255.0</p>
<p dir="auto">and CSO for client2 (192.168.15.0)</p>
<p dir="auto">ifconfig-push 10.0.8.20 10.0.8.1<br />
push "route 192.168.43.0 255.255.255.0"<br />
push "route 192.168.13.0 255.255.255.0"<br />
iroute 192.168.15.0 255.255.255.0</p>
<p dir="auto">Thanks in advance for your help about this case.<br />
Maybe it's just a routing or NAT problem because client &amp; server can ping all hosts but I've tried lot of settings unsuccessfully.</p>
<p dir="auto">Best regards<br />
<img src="/public/_imported_attachments_/1/OpenVPN_multisite_Cloudserver.png" alt="OpenVPN_multisite_Cloudserver.png" class=" img-fluid img-markdown" /><br />
<img src="/public/_imported_attachments_/1/OpenVPN_multisite_Cloudserver.png_thumb" alt="OpenVPN_multisite_Cloudserver.png_thumb" class=" img-fluid img-markdown" /></p>
]]></description><link>https://forum.netgate.com/topic/90496/pfsense-openvpn-server-in-the-cloud-peer-to-peer-with-multiple-clients</link><generator>RSS for Node</generator><lastBuildDate>Tue, 06 Oct 2026 08:39:49 GMT</lastBuildDate><atom:link href="https://forum.netgate.com/topic/90496.rss" rel="self" type="application/rss+xml"/><pubDate>Mon, 19 Oct 2015 09:43:39 GMT</pubDate><ttl>60</ttl><item><title><![CDATA[Reply to Pfsense OpenVPN Server in the cloud – peer to peer with multiple clients on Mon, 19 Oct 2015 10:12:19 GMT]]></title><description><![CDATA[<p dir="auto">it works</p>
<p dir="auto">I've added a NAT outbound rule to allow communication</p>
<p dir="auto">interface : openvpn<br />
source : any<br />
source port : *<br />
destination : any<br />
destination : *<br />
nat port : *<br />
satic port : no<br />
nat address : OpenVPN address</p>
<p dir="auto">Ping works from a client LAN host to another client LAN host.</p>
<p dir="auto">OUFFFFFF.</p>
]]></description><link>https://forum.netgate.com/post/577769</link><guid isPermaLink="true">https://forum.netgate.com/post/577769</guid><dc:creator><![CDATA[sergesphinx]]></dc:creator><pubDate>Mon, 19 Oct 2015 10:12:19 GMT</pubDate></item></channel></rss>