OPNsense Forum

English Forums => Virtual private networks => Topic started by: lotzofwork on November 26, 2021, 12:05:26 am

Title: OpenVPN - Client Specific Overrides - Routes not applied
Post by: lotzofwork on November 26, 2021, 12:05:26 am
Hello together,

I´ve created a SSL-Remote-Access-VPN-Server with the following important settings:

Server Mode: Remote Access SSL/TLS + User Auth
Local port: 1194 UDP
IPv4 Tunnel Network: 172.20.20.0/24
IPv4 Local Network: 192.168.1.0/24,192.168.2.0/24,192.168.3.0/24,192.168.4.0/24
Force CSO Login Matching: true

The client specific override applies to my personal ldap user "prename.lastname" with this settings:

Servers: Remote Access VPN (see above)
IPv4 Tunnel Network: 172.20.22.0/24
Redirect Gateway: true
Server Definitions: true
DNS Default Domain: lastname.local
DNS Servers: 192.168.3.4

Firewall Rules are ANY - ANY on every interface (WAN, OVPN) for debugging cases.

If I join the default vpn server network with my OpenVPN Client I get the following ipconfig:

IPv4 network: 172.20.20.0/24
IPv4 address: 172.20.20.2/32
Gateway: 172.20.20.1/32

Route entries for all IPs above are automatically applied to the routing table. Traffic flow is fine.

If I join with my personal account to the 172.20.22.0/24 network settings are as follows:

IPv4 network: 172.20.22.0/24
IPv4 address: 172.20.22.2/32
Gateway: 172.20.22.1/32

No routes for 172.20.22.0/24 or 172.20.22.1/32 or 172.20.22.2/32 are added to the routing table.
If I send a icmp ping from within the vpn network to eg. 8.8.8.8, reply packets from 8.8.8.8 come back to WAN interface, but get routed to the default gateway and not out of the ovpn interface.

I tried to manually assign Virtual IP Aliases to the ovpn interface, but this did not fix the issue.
Seems like a bug for me. Maybe I´m doing something wrong.

Could you please support me?

Thanks!

Title: Re: OpenVPN - Client Specific Overrides - Routes not applied
Post by: alh on February 02, 2022, 01:47:53 am
I have exactly the same issue. Routes are only added to the routing table randomly even though the do show in "OpenVPN: Connection Status".