pfSense openVPN not assigning default gateway to clients

cw12

I am running an openVPN server on pfsense to connect to my private network using Tunnelblick. The end goal of this process is to be able to use AFP to backup my mac on a server located on my internal network. When I connect to the VPN, the connection is successful, and an appropriate IP address from the pool is assigned, but the default gateway is not assigned, it remains the same as before I connected to the VPN. Once I am connected to the VPN, I should not have internet access on the client. If any additional information is needed, please let me know.

openVPN config:

dev ovpns1
verb 3
dev-type tap
dev-node /dev/tap1
writepid /var/run/openvpn_server1.pid
#user nobody
#group nobody
script-security 3
daemon
keepalive 10 60
ping-timer-rem
persist-tun
persist-key
proto tcp-server
cipher AES-128-CBC
auth SHA1
up /usr/local/sbin/ovpn-linkup
down /usr/local/sbin/ovpn-linkdown
local 128.151.18.205
tls-server
server-bridge 192.168.42.36 255.255.224.0 192.168.40.10 192.168.40.49
client-config-dir /var/etc/openvpn-csc
tls-verify "/usr/local/sbin/ovpn_auth_verify tls 'Server' 1 "
lport 443
management /var/etc/openvpn/server1.sock unix
push "route 192.168.0.0 255.255.0.0"
push "redirect-gateway def1"
ca /var/etc/openvpn/server1.ca
cert /var/etc/openvpn/server1.cert
key /var/etc/openvpn/server1.key
dh /etc/dh-parameters.1024
tls-auth /var/etc/openvpn/server1.tls-auth 0

client config:

client
dev tap
proto tcp
remote 128.151.18.205 443
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
cert Mac.crt
key Mac.key
ns-cert-type server
tls-auth ta.key 1
cipher AES-128-CBC
auth SHA1
redirect-gateway def1

openVPN log:

Jul 14 17:11:19 openvpn[73063]: MANAGEMENT: Client connected from /var/etc/openvpn/server1.sock
Jul 14 17:11:19 openvpn[73063]: MANAGEMENT: CMD 'status 2'
Jul 14 17:11:19 openvpn[73063]: MANAGEMENT: CMD 'quit'
Jul 14 17:11:19 openvpn[73063]: MANAGEMENT: Client disconnected

client log:

2015-07-14 15:51:12 *Tunnelblick: OS X 10.7.5; Tunnelblick 3.6beta08 (build 4371); prior version 3.6beta06 (build 4346)
2015-07-14 15:51:17 *Tunnelblick: Attempting connection with config using shadow copy; Set nameserver = 1; monitoring connection
2015-07-14 15:51:17 *Tunnelblick: openvpnstart start config.tblk 1337 1 0 1 0 16754 -ptADGNWradsgnw 2.3.7
2015-07-14 15:51:19 *Tunnelblick: openvpnstart log:
Loading tap-20111101.kext
OpenVPN started successfully. Command used to start OpenVPN (one argument per displayed line):

/Applications/Tunnelblick.app/Contents/Resources/openvpn/openvpn-2.3.7/openvpn
--daemon
--log
/Library/Application Support/Tunnelblick/Logs/-SUsers-Sc-SLibrary-SApplication Support-STunnelblick-SConfigurations-Sconfig.tblk-SContents-SResources-Sconfig.ovpn.1_0_1_0_16754.1337.openvpn.log
--cd
/Library/Application Support/Tunnelblick/Users/c/config.tblk/Contents/Resources
--verb
3
--config
/Library/Application Support/Tunnelblick/Users/c/config.tblk/Contents/Resources/config.ovpn
--cd
/Library/Application Support/Tunnelblick/Users/c/config.tblk/Contents/Resources
--management
127.0.0.1
1337
--management-query-passwords
--management-hold
--script-security
2
--up
/Applications/Tunnelblick.app/Contents/Resources/client.up.tunnelblick.sh -a -d -f -m -w -ptADGNWradsgnw
--down
/Applications/Tunnelblick.app/Contents/Resources/client.down.tunnelblick.sh -a -d -f -m -w -ptADGNWradsgnw
--route-pre-down
/Applications/Tunnelblick.app/Contents/Resources/client.route-pre-down.tunnelblick.sh -a -d -f -m -w -ptADGNWradsgnw

2015-07-14 15:51:17 *Tunnelblick: openvpnstart starting OpenVPN
2015-07-14 15:51:18 OpenVPN 2.3.7 x86_64-apple-darwin [SSL (OpenSSL)] [LZO] [PKCS11] [MH] [IPv6] built on Jul 10 2015
2015-07-14 15:51:18 library versions: OpenSSL 1.0.2d 9 Jul 2015, LZO 2.09
2015-07-14 15:51:18 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:1337
2015-07-14 15:51:18 Need hold release from management interface, waiting...
2015-07-14 15:51:19 *Tunnelblick: Established communication with OpenVPN
2015-07-14 15:51:19 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:1337
2015-07-14 15:51:19 MANAGEMENT: CMD 'pid'
2015-07-14 15:51:19 MANAGEMENT: CMD 'state on'
2015-07-14 15:51:19 MANAGEMENT: CMD 'state'
2015-07-14 15:51:19 MANAGEMENT: CMD 'bytecount 1'
2015-07-14 15:51:19 MANAGEMENT: CMD 'hold release'
2015-07-14 15:51:19 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
2015-07-14 15:51:19 Control Channel Authentication: using 'ta.key' as a OpenVPN static key file
2015-07-14 15:51:19 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
2015-07-14 15:51:19 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
2015-07-14 15:51:19 Socket Buffers: R=[262140->65536] S=[131070->65536]
2015-07-14 15:51:19 Attempting to establish TCP connection with [AF_INET]128.151.18.205:443 [nonblock]
2015-07-14 15:51:19 MANAGEMENT: >STATE:1436903479,TCP_CONNECT,,,
2015-07-14 15:51:20 TCP connection established with [AF_INET]128.151.18.205:443
2015-07-14 15:51:20 TCPv4_CLIENT link local: [undef]
2015-07-14 15:51:20 TCPv4_CLIENT link remote: [AF_INET]128.151.18.205:443
2015-07-14 15:51:20 MANAGEMENT: >STATE:1436903480,WAIT,,,
2015-07-14 15:51:20 MANAGEMENT: >STATE:1436903480,AUTH,,,
2015-07-14 15:51:20 TLS: Initial packet from [AF_INET]128.151.18.205:443, sid=e1573138 215464ee
2015-07-14 15:51:20 VERIFY OK: depth=1, C=US, ST=New York, L=R, O=U, emailAddress=gfdg@gmail.com, CN=internal-ca
2015-07-14 15:51:20 VERIFY OK: nsCertType=SERVER
2015-07-14 15:51:20 VERIFY OK: depth=0, C=US, ST=New York, L=R, O=U, emailAddress=gfdg@gmail.com, CN=Server
2015-07-14 15:51:20 Data Channel Encrypt: Cipher 'AES-128-CBC' initialized with 128 bit key
2015-07-14 15:51:20 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
2015-07-14 15:51:20 Data Channel Decrypt: Cipher 'AES-128-CBC' initialized with 128 bit key
2015-07-14 15:51:20 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
2015-07-14 15:51:20 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 DHE-RSA-AES256-GCM-SHA384, 2048 bit RSA
2015-07-14 15:51:20 [Server] Peer Connection Initiated with [AF_INET]128.151.18.205:443
2015-07-14 15:51:21 MANAGEMENT: >STATE:1436903481,GET_CONFIG,,,
2015-07-14 15:51:22 SENT CONTROL [Server]: 'PUSH_REQUEST' (status=1)
2015-07-14 15:51:22 PUSH: Received control message: 'PUSH_REPLY,route 192.168.0.0 255.255.0.0,redirect-gateway def1,route-gateway 192.168.42.36,ping 10,ping-restart 60,ifconfig 192.168.40.10 255.255.224.0'
2015-07-14 15:51:22 OPTIONS IMPORT: timers and/or timeouts modified
2015-07-14 15:51:22 OPTIONS IMPORT: --ifconfig/up options modified
2015-07-14 15:51:22 OPTIONS IMPORT: route options modified
2015-07-14 15:51:22 OPTIONS IMPORT: route-related options modified
2015-07-14 15:51:22 TUN/TAP device /dev/tap0 opened
2015-07-14 15:51:22 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
2015-07-14 15:51:22 MANAGEMENT: >STATE:1436903482,ASSIGN_IP,,192.168.40.10,
2015-07-14 15:51:22 /sbin/ifconfig tap0 delete
ifconfig: ioctl (SIOCDIFADDR): Can't assign requested address
2015-07-14 15:51:22 NOTE: Tried to delete pre-existing tun/tap instance -- No Problem if failure
2015-07-14 15:51:22 /sbin/ifconfig tap0 192.168.40.10 netmask 255.255.224.0 mtu 1500 up
2015-07-14 15:51:22 /Applications/Tunnelblick.app/Contents/Resources/client.up.tunnelblick.sh -a -d -f -m -w -ptADGNWradsgnw tap0 1500 1591 192.168.40.10 255.255.224.0 init
**********************************************
Start of output from client.up.tunnelblick.sh
NOTE: No network configuration changes need to be made.
WARNING: Will NOT monitor for other network configuration changes.
DNS servers '172.29.35.194 172.29.40.66 172.25.192.69 128.151.224.6' will be used for DNS queries when the VPN is active
NOTE: The DNS servers do not include any free public DNS servers known to Tunnelblick. This may cause DNS queries to fail or be intercepted or falsified even if they are directed through the VPN. Specify only known public DNS servers or DNS servers located on the VPN network to avoid such problems.
Flushed the DNS cache via dscacheutil
/usr/sbin/discoveryutil not present. Not flushing the DNS cache via discoveryutil
Notified mDNSResponder that the DNS cache was flushed
End of output from client.up.tunnelblick.sh
**********************************************
2015-07-14 15:51:25 *Tunnelblick: No 'connected.sh' script to execute
2015-07-14 15:51:25 /sbin/route add -net 128.151.18.205 10.5.0.50 255.255.255.255
add net 128.151.18.205: gateway 10.5.0.50
2015-07-14 15:51:25 /sbin/route add -net 0.0.0.0 192.168.42.36 128.0.0.0
add net 0.0.0.0: gateway 192.168.42.36
2015-07-14 15:51:25 /sbin/route add -net 128.0.0.0 192.168.42.36 128.0.0.0
add net 128.0.0.0: gateway 192.168.42.36
2015-07-14 15:51:25 MANAGEMENT: >STATE:1436903485,ADD_ROUTES,,,
2015-07-14 15:51:25 /sbin/route add -net 192.168.0.0 192.168.42.36 255.255.0.0
add net 192.168.0.0: gateway 192.168.42.36
2015-07-14 15:51:25 Initialization Sequence Completed
2015-07-14 15:51:25 MANAGEMENT: >STATE:1436903485,CONNECTED,SUCCESS,192.168.40.10,128.151.18.205
2015-07-14 15:52:05 *Tunnelblick: After 30.0 seconds, gave up trying to fetch IP address information using the ipInfo host's name after connecting.
2015-07-14 15:52:37 *Tunnelblick: After 30.0 seconds, gave up trying to fetch IP address information using the ipInfo host's IP address after connecting.
2015-07-14 15:55:50 *Tunnelblick: Disconnecting; VPN Details??? window disconnect button pressed
2015-07-14 15:55:50 *Tunnelblick: Disconnecting using 'kill'
2015-07-14 15:55:50 event_wait : Interrupted system call (code=4)
2015-07-14 15:55:50 /Applications/Tunnelblick.app/Contents/Resources/client.route-pre-down.tunnelblick.sh -a -d -f -m -w -ptADGNWradsgnw tap0 1500 1591 192.168.40.10 255.255.224.0 init
**********************************************
Start of output from client.route-pre-down.tunnelblick.sh
WARNING: No saved Tunnelblick DNS configuration found; not doing anything.
End of output from client.route-pre-down.tunnelblick.sh
**********************************************
2015-07-14 15:55:51 /sbin/route delete -net 192.168.0.0 192.168.42.36 255.255.0.0
delete net 192.168.0.0: gateway 192.168.42.36
2015-07-14 15:55:51 /sbin/route delete -net 128.151.18.205 10.5.0.50 255.255.255.255
delete net 128.151.18.205: gateway 10.5.0.50
2015-07-14 15:55:51 /sbin/route delete -net 0.0.0.0 192.168.42.36 128.0.0.0
delete net 0.0.0.0: gateway 192.168.42.36
2015-07-14 15:55:51 /sbin/route delete -net 128.0.0.0 192.168.42.36 128.0.0.0
delete net 128.0.0.0: gateway 192.168.42.36
2015-07-14 15:55:51 Closing TUN/TAP interface
2015-07-14 15:55:51 /Applications/Tunnelblick.app/Contents/Resources/client.down.tunnelblick.sh -a -d -f -m -w -ptADGNWradsgnw tap0 1500 1591 192.168.40.10 255.255.224.0 init
**********************************************
Start of output from client.down.tunnelblick.sh
WARNING: Not restoring DNS settings because no saved Tunnelblick DNS information was found.
Flushed the DNS cache via dscacheutil
/usr/sbin/discoveryutil not present. Not flushing the DNS cache via discoveryutil
Notified mDNSResponder that the DNS cache was flushed
End of output from client.down.tunnelblick.sh
**********************************************
2015-07-14 15:55:53 SIGTERM[hard,] received, process exiting
2015-07-14 15:55:53 MANAGEMENT: >STATE:1436903753,EXITING,SIGTERM,,
2015-07-14 15:55:54 *Tunnelblick: No 'post-disconnect.sh' script to execute
2015-07-14 15:55:54 *Tunnelblick: Expected disconnection occurred.

maikcat

2015-07-14 15:51:25 /sbin/route add -net 0.0.0.0 192.168.42.36 128.0.0.0
add net 0.0.0.0: gateway 192.168.42.36
2015-07-14 15:51:25 /sbin/route add -net 128.0.0.0 192.168.42.36 128.0.0.0
add net 128.0.0.0: gateway 192.168.42.36

but the default gateway is not assigned,

the above logs shows that your gateway IS changed...

Michael.