Messages

Hello,
I run OPNsense 19.1.9-amd64 in a VMware enviroment.
Without VPN i easy get 300/300 Mbit but when enabled i get about 9ms and around 4 Mbit down and 20 Mbit up.
On OPNsense 18.x i got max bandwith with vpn same provider same hardware.

I have recently installed the FW have tried followed several guides without any luck.
I have struggled quite some time with this and got to a point i really need some help or ill have to try another product like PFsense/openWRT or something like that. But i really like OPNsense.

https://blog.monstermuffin.org/tunneling-specific-traffic-over-a-vpn-with-pfsense/
https://www.ovpn.com/sv/guides/pfsense
https://support.nordvpn.com/Connectivity/Router/1292598142/OPNsense-18-7-setup-with-NordVPN.htm
https://www.reddit.com/r/PFSENSE/comments/6edsav/how_to_proper_partial_network_vpn_with_kill_switch/

The settings i have now are the following: https://1drv.ms/u/s!AkxiLC6ydXT4o5hFo4SetIl37KI8OQ:

I have also tried the minimum setup:


Firewall - Rules - LAN:
Protocol IPv4: Source:LAN net *port *Desternation *Port Gateway:VPN (Send all traffic via gateway VPN)

NAT - Outbond:
VPN Interface any source  *port *Desternation *Desternation Port NAT Adress Interface Adress *Nat port
(Allow all Outbound traffic over VPN )

But still high ms and extremly low bandwith.
My primary goal is to be behind VPN, my long term goal is to only use VPN behind all clients but the ones behind an alias of them that will route over ordinary WAN.

As i see now the CPU is maxed when i benchmark the internet.
VMware tools are installed and over INterfaces: Settings the following are disabled:
Disable hardware checksum offload
Disable hardware TCP segmentation offload
Disable hardware large receive offload

Vmwaretools reinstallled without any progress.

Are version 19 bad at optimizing workloads when useing VPN and encryption?
Is AES-NI still supported and enabled as default?

Thanks

Well interesting,

when this option is set i can access PLEX hosted over my openvpn connection from 4G on mobile.
But the DHCP clients can't access internet then..

"Register DHCP static mappings in the DNS Resolver"

If im gonna use portforward under OpenVPN that all my clients under DHCP are getting now should i just change the WAN for VPN in this tutorial ?

Dont get it to work.

 Hello,

Im been reading several posts about OPNsense and OpenVPN.
Im getting local DHCP clients getting routed throuh the VPN and its working.

But, i need to PortForward traffic over external VPN to a machine inside the LAN that uses static mapping but i really cant make it work..

Ill posty my config:

VPN:
Infinitely resolve remote server - Ticked
Don't pull routes - Unticked
Don't add/remove routes - Ticked
UDP enabled

Systsem\Gateways\Single:
WAN_GWv4 (default)   WAN

Port Forward:
OpenVPN:
TCP/UDP
NAT reflection - Enabled
Filter rule association - Rule Nat

Firwall\Settings\Advanced:
Reflection for port forwards - Ticked
Reflection for 1:1 - Unticked
Automatic outbound NAT for Reflection - Ticked

Running OPNsense 18.7.10-amd64

OVPN over openVPN.
WAN 172.22.1.4 - Edgemax 172.22.1.4 - ISP
LAN 192.168.1.2
VPN    10.128.64.xx Puiblic 185.x.x.x

Any tip is welcome

Hello,

Im trying to port forward a specified port so its opened in the VPN interface.
Now its configured all DHCP clients are under VPN and its working good besides the port forward issue.

I have tried several configs and tutorials without success.
Have heard one person saying its a bug in OPNsense that you can only portforward within a WAN interface, dont know it its true.

Im stuck aswell and others running PFsense this works directly.


Running OPNsense 18.7.10-amd64

OVPN over openVPN.
WAN 172.22.1.4 - Edgemax 172.22.1.4
LAN 192.168.1.2
VPN    10.128.64.xx Puiblic 185.x.x.x

Anyone haveing some ideas?