• Some users have recently had their accounts hijacked. It seems that the now defunct EVGA forums might have compromised your password there and seems many are using the same PW here. We would suggest you UPDATE YOUR PASSWORD and TURN ON 2FA for your account here to further secure it. None of the compromised accounts had 2FA turned on.
    Once you have enabled 2FA, your account will be updated soon to show a badge, letting other members know that you use 2FA to protect your account. This should be beneficial for everyone that uses FSFT.

OpenVPN bridge config Pfsense

S

svar

Weaksauce
Joined
Aug 13, 2010
Messages
83
Hi :)

I trying to config 2 pfsense alix boxes for OpenVPN but are kinda stuck.
What I try to do is to bridge the LAN, so that clients on the VPN client side gets IP from an DHCP server that i have on the VPN Server LAN side.

I have tried many guides that I have found, but still nothing.
The boxes is in an lab now, so I use private IP for the testing.

Anyone have got this to work and can maybe give me some guides/input?
 
No one?
What Im trying to do is bridged site-to-site over OpenVPN.
I need the clients on the vpn-client side to get IP from the DHCP server on LAN on the VPN server side.
 
Well I haven't ever tried to get this working but I am rather familiar with pfSense so I can give you some general info:

Firstly as I'm sure you're aware, Layer 3 devices will block your DHCP broadcasts without special configuration.

What guides have you looked at to achieve this? I'm not sure what all you have tried at this point, but I believe you can bridge certain interfaces and you should try that.

So basically you need to set up the bridge, add the firewall rules, and add any routing necessary.

You may want to do some packet sniffing on each end to see if DHCP traffic is making it one way and not back or what the deal is, it will help you troubleshoot.
 
Hi :)

I follow this guide http://unflyingobject.com/blog/posts/1064
But its not complete, e.g. it don't say anything about that you need certs and how to make them, so I found some other guides on how to make certs on Ubuntu for OpenVPN.

I have tried to have the same ip on both ends LAN, not to have them on same IP and/or subnet, tried to bridge Tap0 +LAN, LAN+tap0 and so on.
 
You must log in or register to reply here.
Back
Top