OpenVPN sesrver not running

alex3182

Hi guys
Need help
I've spent days on this, still no luck
Setup:
I've deployed VM on the cloud, used latest PFSense template, can ssh into the server and can access PFSense page through public IP, so no problems there
I've installed OpenVPN packed on PFSense firewall, setup CA, added a vpn user, gone through OpenVPN wizzard, downloaded the client.exe and tried to connect, no luck
IP address allocated to the VM is 192.168.128.170 and subnet mask 255.255.255.0
Started investigating further
When I clog/tail the openvpn log file i'm getting random errors, depending what I change in server.conf
The most common error I get is below:

Options error: --server directive network/netmask combination is invalid

Then when I change few bits in conf file error message changes:

/sbin/ifconfig ovpns1 192.168.128.1 192.168.128.2 mtu 1500 netmask 255.255.255.255 up
FreeBSD ifconfig failed: external program exited with error status: 1
[41507]: Exiting due to fatal error

and this one

Sep 24 13:38:46 pfSense openvpn[47565]: NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Sep 24 13:38:46 pfSense openvpn[47565]: Control Channel Authentication: using '/var/etc/openvpn/server1.tls-auth' as a OpenVPN static key file
Sep 24 13:38:46 pfSense openvpn[47565]: TCP/UDP: Socket bind failed on local address [AF_INET]192.168.1.1:1194: Can't assign requested address
Sep 24 13:38:46 pfSense openvpn[47565]: Exiting due to fatal error

No matter what I try nothing works, need some help/advise please

server.conf file:

dev ovpns1
dev-type tun
tun-ipv6
dev-node /dev/tun1
writepid /var/run/openvpn_server1.pid
#user nobody
#group nobody
script-security 3
daemon
keepalive 10 60
ping-timer-rem
persist-tun
persist-key
proto udp
cipher AES-128-CBC
up /usr/local/sbin/ovpn-linkup
down /usr/local/sbin/ovpn-linkdown
client-connect /usr/local/sbin/openvpn.attributes.sh
client-disconnect /usr/local/sbin/openvpn.attributes.sh
local 192.168.128.170
tls-server
server 192.168.128.1 255.255.255.0
client-config-dir /var/etc/openvpn-csc
username-as-common-name
auth-user-pass-verify /var/etc/openvpn/server1.php via-env
tls-verify /var/etc/openvpn/server1.tls-verify.php
lport 1194
management /var/etc/openvpn/server1.sock unix
max-clients 10
ca /var/etc/openvpn/server1.ca
cert /var/etc/openvpn/server1.cert
key /var/etc/openvpn/server1.key
dh /etc/dh-parameters.1024

Also, If I go to Status > OpenVPN I can see that the server is not running, when I start it it still doesn't run, in the mean time I clog/tail the log file and can see the errors

Any feedback/help/advise would be much appreciated
Thank you

Alex

Traffic

alex3182 wrote

dev-type tun
local 192.168.128.170
server 192.168.128.1 255.255.255.0

Not sure about your other problem but this is a network conflict.

In mode TUN your VPN IP and Real IP must be unique networks.

Example:

dev-type tun
local 192.168.128.170
server 10.8.0.0 255.255.255.0

In TAP mode with a server-bridge your VPN and Real networks can be the same.