Andrew11
Hello,
I am currently working on a project for school and I could really use some help as my deadline is coming up.
So I'm using OPNSense as a firewall and I have installed and set up a Open VPN server however I am having some issues connecting to it. I followed the instructions using this link https://docs.opnsense.org/manual/how-tos/sslvpn_client.html . However when I attempt to download the client config file from the client export section the download never starts, I can see the option to download them but clicking on them simply does not do anything. As a work around I attempted to create the client config file manually. When I attempt to use this client config file to connect to the created VPN I get unroutable control packet errors. I have provided my client and server config files below.
-Thanks
Client Config File:
persist-tun
persist-key
cipher AES-128-CBC
auth SHA1
tls-client
client
dev tun
proto udp
remote 192.168.50.244 1194
#lport 0
verify-x509-name "VPN Server Certificate" name
auth-user-pass
remote-cert-tls server
float
<ca>
CA Certificate
</ca>
<cert>
User Certificate
</cert>
<key>
User Key
</key>
<tls-auth>
Server Key
</tls-auth>
key-direction 1
Server Conf File:
dev ovpns2
verb 1
dev-type tun
dev-node /dev/tun2
writepid /var/run/openvpn_server2.pid
script-security 3
daemon
keepalive 10 60
ping-timer-rem
persist-tun
persist-key
proto udp
cipher AES-128-CBC
auth SHA1
up /usr/local/etc/inc/plugins.inc.d/openvpn/ovpn-linkup
down /usr/local/etc/inc/plugins.inc.d/openvpn/ovpn-linkdown
local 192.168.50.244
client-disconnect "/usr/local/etc/inc/plugins.inc.d/openvpn/attributes.sh server 2"
tls-server
server 192.168.70.0 255.255.255.0
client-config-dir /var/etc/openvpn-csc/2
verify-client-cert none
username-as-common-name
auth-user-pass-verify "/usr/local/etc/inc/plugins.inc.d/openvpn/ovpn_auth_verify user 'TOTP VPN Access Server' 'false' 'server2'" via-env
tls-verify "/usr/local/etc/inc/plugins.inc.d/openvpn/ovpn_auth_verify tls 'OPNVPN+Server+Certificate' 1"
lport 1194
management /var/etc/openvpn/server2.sock unix
push "route 192.168.3.0 255.255.255.0"
ca /var/etc/openvpn/server2.ca
cert /var/etc/openvpn/server2.cert
key /var/etc/openvpn/server2.key
dh /usr/local/etc/dh-parameters.2048.sample
tls-auth /var/etc/openvpn/server2.tls-auth 0
comp-lzo adaptive
reneg-sec 0
