OPNsense Forum

Archive => 23.7 Legacy Series => Topic started by: allan on August 06, 2023, 05:11:15 AM

Title: OpenVPN Outbound NAT
Post by: allan on August 06, 2023, 05:11:15 AM
I just upgraded to 23.7 and migrated my OpenVPN remote access server to the new instance config. I am not completely certain, but I thought "OpenVPN networks" was listed under Outbound NAT automatic rules. Was removing it something intentional or a bug? I created a manual outbound NAT rule which got me going, but I want to mention it here just in case.
Title: Re: OpenVPN Outbound NAT
Post by: Andi.K on August 17, 2023, 03:14:18 PM
Same here, I think this is a bug.

Version   23.7.1_3

The NAT rule is important when, for example, the default GW is redirected. Without NAT no internet access is possible
Title: Re: OpenVPN Outbound NAT
Post by: franco on August 17, 2023, 03:28:28 PM
NAT rules are manual now with IPsec/OpenVPN MVC pages.


Cheers,
Franco
Title: Re: OpenVPN Outbound NAT
Post by: RES217AIII on August 19, 2023, 08:14:00 AM
Good morning,
how does this outgoing NAT rule have to look like?
I'm having problems with my OPN servers: Both the old server configuration and a new instance do not connect.
Thank you
Title: Re: OpenVPN Outbound NAT
Post by: allan on August 19, 2023, 05:57:05 PM
The NAT rule is only for connecting OpenVPN users to the Internet. Access to internal resources would not go through the NAT.

Here is how I have it set under Firewall > NAT > Outbound:

1. Set the Mode to "Hybrid outbound NAT rule generation"
2. Create a Manual rule and set the following options:
Title: Re: OpenVPN Outbound NAT
Post by: RES217AIII on August 20, 2023, 11:04:55 AM
Thank you!