It is the first time I setup openvpn on a Windows10 virtual machine on azure, working as server (the openvpn). If I put all the files in the right folder on my pc, I can connect to the vpn. So that is working oke.
But I want to setup my pfsense as openvpn client as well.
I followed some manuals, but I do not seem to be able to get it connected.
Last errors on the server log are:
Wed Feb 03 23:09:05 2021 OpenVPN 2.4.9 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] built on Apr 16 2020
Wed Feb 03 23:09:05 2021 Windows version 6.2 (Windows 8 or greater) 64bit
Wed Feb 03 23:09:05 2021 library versions: OpenSSL 1.1.1f 31 Mar 2020, LZO 2.10
Wed Feb 03 23:09:05 2021 Diffie-Hellman initialized with 2048 bit key
Wed Feb 03 23:09:05 2021 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Feb 03 23:09:05 2021 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Feb 03 23:09:05 2021 interactive service msg_channel=0
Wed Feb 03 23:09:05 2021 ROUTE_GATEWAY 10.0.0.1/255.255.255.0 I=6 HWADDR=00:0d:3a:bf:68:43
Wed Feb 03 23:09:05 2021 open_tun
Wed Feb 03 23:09:05 2021 TAP-WIN32 device [Local Area Connection] opened: \\.\Global\{17008362-59FE-4FEF-BFA4-8853F107D2AF}.tap
Wed Feb 03 23:09:05 2021 TAP-Windows Driver Version 9.24
Wed Feb 03 23:09:05 2021 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.8.0.1/255.255.255.252 on interface {17008362-59FE-4FEF-BFA4-8853F107D2AF} [DHCP-serv: 10.8.0.2, lease-time: 31536000]
Wed Feb 03 23:09:05 2021 Sleeping for 10 seconds...
Wed Feb 03 23:09:15 2021 Successful ARP Flush on interface [10] {17008362-59FE-4FEF-BFA4-8853F107D2AF}
Wed Feb 03 23:09:15 2021 C:\windows\system32\route.exe ADD 10.8.0.0 MASK 255.255.255.0 10.8.0.2
Wed Feb 03 23:09:15 2021 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=25 and dwForwardType=4
Wed Feb 03 23:09:15 2021 Route addition via IPAPI succeeded [adaptive]
Wed Feb 03 23:09:15 2021 Could not determine IPv4/IPv6 protocol. Using AF_INET6
Wed Feb 03 23:09:15 2021 Socket Buffers: R=[65536->65536] S=[65536->65536]
Wed Feb 03 23:09:15 2021 setsockopt(IPV6_V6ONLY=0)
Wed Feb 03 23:09:15 2021 UDPv6 link local (bound): [AF_INET6][undef]:1194
Wed Feb 03 23:09:15 2021 UDPv6 link remote: [AF_UNSPEC]
Wed Feb 03 23:09:15 2021 MULTI: multi_init called, r=256 v=256
Wed Feb 03 23:09:15 2021 IFCONFIG POOL: base=10.8.0.4 size=62, ipv6=0
Wed Feb 03 23:09:15 2021 ifconfig_pool_read(), in='pfsense-tienen,10.8.0.4', TODO: IPv6
Wed Feb 03 23:09:15 2021 succeeded -> ifconfig_pool_set()
Wed Feb 03 23:09:15 2021 IFCONFIG POOL LIST
Wed Feb 03 23:09:15 2021 pfsense-tienen,10.8.0.4
Wed Feb 03 23:09:15 2021 Initialization Sequence Completed
Wed Feb 03 23:10:43 2021 Authenticate/Decrypt packet error: packet HMAC authentication failed
Wed Feb 03 23:10:43 2021 TLS Error: incoming packet authentication failed from [AF_INET6]::ffff:95.123.145.92:17593
On the pfsense I get status connected, but no ip's and it says status: reconnecting; ping-restart
AND in the pfsense logs:
Feb 3 23:15:39 openvpn 86469 Outgoing Static Key Encryption: Cipher 'AES-256-CBC' initialized with 256 bit key
Feb 3 23:15:39 openvpn 86469 Outgoing Static Key Encryption: Using 160 bit message hash 'SHA1' for HMAC authentication