(I'm also doing other optional stuff like tagging traffic, make sure it can't go out the regular WAN connection without going through VPN, etc.) Setup firewall rule on VPN interface to forward all traffic out of of VPN_WAN gateway Openvpn -> assign to VPN_WAN interface (DHCP ipv4)Ĭreation another interface (VPN) to act as a gateway (192.168.10.1/24) The VPN appears to be connecting correctly/etc., I just seem to be having trouble getting the routing to get set properly. It seems I can't get traffic to route out of the gateway (trying to do a tracrt, navigate to a site, etc.).Sometimes, the gateway for the VPN does not get assigned (0.0.0.0) or is assigned the wrong address (like 255.255.255.0).I'm having a hard time pinpointing the root of this issue. Oct 11 23:18:14 kernel: ovpnc1: link state changed to DOWN Oct 11 23:18:16 kernel: ovpnc1: link state changed to UP Oct 11 23:18:16 opnsense: /usr/local/etc/rc.newwanip: IP renewal is starting on 'ovpnc1' Oct 11 23:18:16 opnsense: /usr/local/etc/rc.newwanip: On (IP address: 10.11.2.7) (interface: VPN_WAN) (real interface: ovpnc1). Oct 11 23:18:16 opnsense: /usr/local/etc/rc.newwanip: ROUTING: entering configure using 'opt3' Oct 11 23:18:16 opnsense: /usr/local/etc/rc.newwanip: ROUTING: IPv6 default gateway set to wan Oct 11 23:18:16 opnsense: /usr/local/etc/rc.newwanip: ROUTING: IPv4 default gateway set to wan Oct 11 23:18:16 opnsense: /usr/local/etc/rc.newwanip: ROUTING: skipping IPv4 default route Oct 11 23:18:16 opnsense: /usr/local/etc/rc.newwanip: ROUTING: skipping IPv6 default route
Pfsense vpn monitor ip code#
Oct 11 23:18:16 opnsense: /usr/local/etc/rc.newwanip: The command '/sbin/route add -host -'inet' '8.8.4.4' '255.255.255.0'' returned exit code '1', the output was 'route: writing to routing socket: Network is unreachable add host 8.8.4.4: gateway 255.255.255.0 fib 0: Network is unreachable' Reloading endpoints that may use VPN_WAN_DHCP. Oct 11 23:18:19 opnsense: /usr/local/etc/rc.openvpn: OpenVPN: One or more OpenVPN tunnel endpoints may have changed its IP. Notice below: the openvpn client gets an IP of 10.11.2.7.
However, I'm also not able to route traffic through the VPN client.
At the surface, it appears this may only be affecting the gateway monitoring. It appears opensense is not assigning gateway addresses correctly when using an openvpn client as a "WAN" interface.
0 kommentar(er)
