NordVPN Tutorials/Instructions?

[cardins2u]

Anyone got NordVPN working on OPNSense? I'm trying to get it to work following PFSense tutorial. It didnt work out.

pretty please anyone?

[jkemp]

Hello cardins2u,

I to use NordVPN and that is the document I used. Although, the settings differ in location it actually will work.

If you want to ask what settings I have in certain areas maybe we can get you up and running.

[JohnnyBeee]

Could someone post a Tutorial for OPNsense?

i tried the pfsense tutorial and I do not see all the parameters in OPNsense and when I just set the parameters that I do see for the VPN client creation and activate the client no more connections to the internet work.

Please help.

[MrB]

How about the guide from NordVPN themselves :

https://support.nordvpn.com/Connectivity/Router/1292598142/OPNsense-18-7-setup-with-NordVPN.htm

[JohnnyBeee]

Thanks.
It wasn't there a few days ago.
Maybe NordVPN thought it was worth putting it up when I insisted with  one of their support guys :-)

[thereaper]

I tried to follow it, with different provider, and stumbled on step 8:

Enabling new Interface with OpenVPN client:
> IPv4 Configuration Type: DHCP

OPNsense GUI gives me error: "Cannot assign an IP configuration type to a tunnel interface"

I thought OpenVPN remote server assigns IP to clients (my OPNsense box) via DHCP, correct?

[firetron]

I'm stuck on this too. I see that in the code, the option will always error for ovpn:
https://github.com/opnsense/core/blob/master/src/www/interfaces.php

Code: [Select]

        if ($pconfig['type'] != 'none' || $pconfig['type6'] != 'none') {
            if (strstr($pconfig['if'], 'gre') || strstr($pconfig['if'], 'gif') || strstr($pconfig['if'], 'ovpn') || strstr($pconfig['if'], 'ipsec')) {
                $input_errors[] = gettext('Cannot assign an IP configuration type to a tunnel interface.');
            }
        }I assume this means that the opnsense developer learned that this is improper for openvpn, and is now forcing us to do it the right way. The problem is that no vpn providers know how to do it the right way yet.
In the opnsense 19.7 release notes, this is the only mention of openvpn:

OpenVPN no longer supports listening on gateway groups.  Use localhost paired with port forwards instead.

Maybe that has something to do with it.

[johnw230873]

Did you get it working as i use nordvpn and it works fine for me

[firetron]

Did you get it working as i use nordvpn and it works fine for me

Did you try it on 19.7? Or did you do it on 19.1 and it just continued to work after upgrading to 19.7?

[johnw230873]

In the beginning due to my network setup (1DMZ, 1 VPN ,1 Guest, 1 IoT) I had decent issues so in the end I went from 19.1 to follow word by word the instructions and then upgraded to 19.7 but after the upgrade it was broken and I needed to fix it.

I thinking due I will try fresh so give me an hour and I'll let you know how I get on with 19.7

[johnw230873]

Hope this helps, I used their instructions and then added some extra notes on it to get the final bits working.

Notes:

Need to unclick "Automatically generate a shared TLS authentication key." in TLS Authentication
after adding client check to make sure it is running under
VPN ==> OpenVPN ==> Connection Status


Only thing done under the interface is to enabled and give a new name

Check under the Dashboard and you should see a NordVPN VPN4 and VPN6 Gateway, if following this you will see they will not have an address, you need to restart the OPNVPN client after creating the Interfaces, hence go and restart and recheck the status here to see an IP pop up against the VPN4 gateway

In Service ==> Unbond DNS  ==> General
needed to uncheck IPv6 Link-local
In outgoing interfaces make sure to select the Nord VPN interface you named above and not the OpenVPN client.


In Firewall ==> Rules ==>
select the NordVPN VPN4 as the default gateway

Under System ==> Settings ==> General
For both 103.86.96.100 & 103.86.99.100 Use gateway:None


This is what I found after using the instructions

At this stage I could ping ips (e.g. 8.8.8. but I couldn't reslove names.
Check traceroutes and saw the default interface was pushing everything down VPNtunnel

I flick backed into the VPN client and select "Don't add/remove Routes"
restarted the firewall

Still no DNS so added an extra rule at the top of the LAN network

Protocol IPV4*
Source LAN Net
Default LAN Net
Gateway Default

DNS kicked back in and I could browse to Nordvpn.com and confirm I was protected.

Last step for me is to go into System ==> Gateways ==> Single and disable the Nord VPN6 gateway.

[firetron]

johnw, this is the issue we are having. did you get around this somehow?

on step 8:

Enabling new Interface with OpenVPN client:
> IPv4 Configuration Type: DHCP

OPNsense GUI gives me error: "Cannot assign an IP configuration type to a tunnel interface"

[johnw230873]

You dont need to set dhcp as tunnel does this all for you.