Server
FreeBSD pfSense.localdomain 11.1-RELEASE-p6 FreeBSD 11.1-RELEASE-p6 #8 r313908+a5b33c9d1c4(RELENG_2_4): Tue Dec 12 13:51:24 CST 2017 root@buildbot2.netgate.com:/builder/ce-242/tmp/obj/builder/ce-242/tmp/FreeBSD-src/sys/pfSense amd64
dev ovpns1
verb 4
dev-type tun
dev-node /dev/tun1
writepid /var/run/openvpn_server1.pid
#user nobody
#group nobody
script-security 3
daemon
keepalive 10 60
ping-timer-rem
persist-tun
persist-key
proto udp
cipher AES-256-CBC
auth SHA256
up /usr/local/sbin/ovpn-linkup
down /usr/local/sbin/ovpn-linkdown
multihome
engine cryptodev
tls-server
server x.x.x.x x.x.x.x
client-config-dir /var/etc/openvpn-csc/server1
tls-verify "/usr/local/sbin/ovpn_auth_verify tls 'xxx' 1"
lport xxx
management /var/etc/openvpn/server1.sock unix
push "dhcp-option DNS x.x.x.x"
push "dhcp-option DNS x.x.x.x"
push "block-outside-dns"
push "register-dns"
push "redirect-gateway def1"
ca /var/etc/openvpn/server1.ca
cert /var/etc/openvpn/server1.cert
key /var/etc/openvpn/server1.key
dh /etc/dh-parameters.4096
tls-crypt /var/etc/openvpn/server1.tls-crypt
ncp-ciphers AES-256-GCM:AES-128-GCM
persist-remote-ip
float
topology subnet
log-append /var/log/bind.log
Server logs:
Mon Feb 26 09:28:49 2018 us=377730 MANAGEMENT: Client connected from /var/etc/openvpn/server1.sock
Mon Feb 26 09:28:49 2018 us=593107 MANAGEMENT: CMD 'status 2'
Mon Feb 26 09:28:49 2018 us=807471 MANAGEMENT: CMD 'quit'
Mon Feb 26 09:28:49 2018 us=807559 MANAGEMENT: Client disconnected
Client
Microsoft Windows [Version 10.0.16299.248]
dev tun
persist-tun
persist-key
cipher AES-256-CBC
ncp-ciphers AES-256-GCM:AES-128-GCM
auth SHA256
tls-client
client
resolv-retry infinite
remote x.x.x.x yyyy
lport yyyy
verify-x509-name "xxx" name
pkcs12 pfSense-udp-xxx-xxx.p12
tls-crypt pfSense-udp-xxx-xxx-tls.key
remote-cert-tls server
redirect-gateway def1
verb 4
Client logs:
Mon Feb 26 22:26:58 2018 us=552134 TCP/UDP: Preserving recently used remote address: [AF_INET]x.x.x.x:yyyy
Mon Feb 26 22:26:58 2018 us=552134 Socket Buffers: R=[65536->65536] S=[65536->65536]
Mon Feb 26 22:26:58 2018 us=552134 MANAGEMENT: Client disconnected
Mon Feb 26 22:26:58 2018 us=552134 TCP/UDP: Socket bind failed on local address [AF_INET6][undef]:yyyy
Mon Feb 26 22:26:58 2018 us=552134 Exiting due to fatal error
Client side config of --lport, --rport, --port and --remote with peer ip, port and protocol or peer ip and port or peer ip alone will not bind the source port. --nobind at least stops it using 1194 but I want to bind the destination and source port.
Thanks for your help.
