Where do I begin. I've created my first pfSense router and it is completely functional... except when it comes to OpenVPN. I have tried numerous different things and still no luck. My [b]FIRST[/b] problem started with the OpenVPN client saying it was connected, but infact it really wasn't. I tried to ask for help on the [b]Netgate Forum [/b] [url]https://forum.netgate.com/topic/131858/openvpn-connected-but-not-routing/6[/url] After no luck over there, I turned to changing fire wall rules, not only in pfSense, but Windows and my anti virus system. I [i][b]then[/b][/i] started getting a different error: [quote]Tue Jun 26 12:27:19 2018 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity) Tue Jun 26 12:27:19 2018 TLS Error: TLS handshake failed[/quote] I've tried numerous things, even tried turning off TLS... still no luck. It went from connecting (but not really) to now not being able to connect at all. This is getting very frustrating and I just want to get it fixed and over with. I can provide anything you may need in order to better help me. Thanks

Your original title was not a good way to start, please see: [url=https://forums.openvpn.net/viewtopic.php?f=30&t=22603]HOWTO: Request Help ![/url] [quote=profIT post_id=79645 time=1530030771 user_id=44410] My FIRST problem started with the OpenVPN client saying it was connected, but infact it really wasn't. [/quote]It really was .. [quote=profIT post_id=79645 time=1530030771 user_id=44410] I turned to changing fire wall rules, not only in pfSense, but Windows and my anti virus system. I then started getting a different error: [code]Tue Jun 26 12:27:19 2018 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity) Tue Jun 26 12:27:19 2018 TLS Error: TLS handshake failed[/code] [/quote]You messed up your firewall probably .. so change it all back again. I have inspected the server and client configs you posted and they should work normally. If you still cannot connect post your client log at [b]verb 4[/b] If you don't know what that means please see --[b]log[/b] & --[b]verb[/b] in [url=https://community.openvpn.net/openvpn/wiki/Openvpn24ManPage]The Manual v24x[/url]

[url=http://openvpn.net/index.php/open-source/documentation/howto.html#scope]HOWTO: Expanding the scope of the VPN to include additional machines[/url]

OpenVPN on pfSense router malfunctions

profIT

Where do I begin. I've created my first pfSense router and it is completely functional... except when it comes to OpenVPN. I have tried numerous different things and still no luck.

My FIRST problem started with the OpenVPN client saying it was connected, but infact it really wasn't. I tried to ask for help on the Netgate Forum https://forum.netgate.com/topic/131858/openvpn-connected-but-not-routing/6

After no luck over there, I turned to changing fire wall rules, not only in pfSense, but Windows and my anti virus system. I then started getting a different error:

Tue Jun 26 12:27:19 2018 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Tue Jun 26 12:27:19 2018 TLS Error: TLS handshake failed

I've tried numerous things, even tried turning off TLS... still no luck. It went from connecting (but not really) to now not being able to connect at all.
This is getting very frustrating and I just want to get it fixed and over with.

I can provide anything you may need in order to better help me.

Thanks

TinCanTech

Your original title was not a good way to start, please see:
HOWTO: Request Help !

profIT wrote My FIRST problem started with the OpenVPN client saying it was connected, but infact it really wasn't.

It really was ..

profIT wrote I turned to changing fire wall rules, not only in pfSense, but Windows and my anti virus system. I then started getting a different error:

Tue Jun 26 12:27:19 2018 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Tue Jun 26 12:27:19 2018 TLS Error: TLS handshake failed

You messed up your firewall probably .. so change it all back again.

I have inspected the server and client configs you posted and they should work normally.

If you still cannot connect post your client log at verb 4

If you don't know what that means please see --log & --verb in The Manual v24x

profIT

Thanks for the response

It really was ..

It really wasn't.. routing my traffic through, at all.

I now believe I have to add a WAN rule and allow the UDP port.

profIT

Got it to route. Im on a virtual 10.0.8.0 network. It's giving me the IP remotely but I cant access the router gui, or rdp or anything else as if i was on the physical network. thoughts?

TinCanTech

HOWTO: Expanding the scope of the VPN to include additional machines