OPNsense Forum

Archive => 21.7 Legacy Series => Topic started by: md0 on September 18, 2021, 04:01:33 PM

Title: OpenVPN routes on 21.7.2_1
Post by: md0 on September 18, 2021, 04:01:33 PM
Hi,

I have an OpenVPN server running on version OPNsense 21.7.2_1.
After updating to the latest firmware my OpenVPN routes for external clients are no longer added to the routing table. I can see them in the OpenVPN connection status page, but not on the main routing table. As such, no traffic is being routed towards the external VPN networks. Is this a known problem? Is there any workaround for it?

Thank you!
Title: Re: OpenVPN routes on 21.7.2_1
Post by: chemlud on September 18, 2021, 04:07:39 PM
Have here for long time now

OPNsense 21.7.2_1-amd64
FreeBSD 12.1-RELEASE-p20-HBSD
LibreSSL 3.3.4


and different openVPN tunnels (s2s), no problems with routes or routing in general...
Title: Re: OpenVPN routes on 21.7.2_1
Post by: md0 on September 18, 2021, 06:20:19 PM
Found the problem: the "IPv4 Local Network" and "IPv4 Remote Network" fields in the OpenVPN configuration page contained spaces after the commas, which made the settings fail to apply silently. Removing the extra spaces and restarting the VPN server made everything go back to normal.
Title: Re: OpenVPN routes on 21.7.2_1
Post by: Mad-Onion on September 22, 2021, 07:12:28 AM
Damn! Had the same problem here after an upgrade to 21.7.2_1 - thank you very much!

The OpenVPN-GUI validates the field correctly and warns about spaces in the list of networks, but if you have those spaces migrated from a previous version, the routing won't work anymore.
Title: Re: OpenVPN routes on 21.7.2_1
Post by: GaardenZwerch on September 24, 2021, 08:31:37 AM
Quote from: chemlud on September 18, 2021, 04:07:39 PM
Have here for long time now

OPNsense 21.7.2_1-amd64
FreeBSD 12.1-RELEASE-p20-HBSD
LibreSSL 3.3.4


and different openVPN tunnels (s2s), no problems with routes or routing in general...

Thanks, that's it.... It's unfortunate that this is not corrected in the upgrade process. My appliances are managed through a tunnel, so this could potentially lock me out. I will have to be very careful.
Thanks!
Title: Re: OpenVPN routes on 21.7.2_1
Post by: JohnDoe17 on October 12, 2021, 10:56:14 PM
This post deserves a thousand "likes!"

I just upgraded from 21.1.x and ran into this issue.  Thank you so much for the solution!

It does seem like something the upgrade process ought to 1) fix or 2) not introduce - it's unclear to me where exactly the issue lies.

JD17