OpenVPN Outbound NAT

[allan]

I just upgraded to 23.7 and migrated my OpenVPN remote access server to the new instance config. I am not completely certain, but I thought "OpenVPN networks" was listed under Outbound NAT automatic rules. Was removing it something intentional or a bug? I created a manual outbound NAT rule which got me going, but I want to mention it here just in case.

[Andi.K]

Same here, I think this is a bug.

Version   23.7.1_3

The NAT rule is important when, for example, the default GW is redirected. Without NAT no internet access is possible

[franco]

NAT rules are manual now with IPsec/OpenVPN MVC pages.


Cheers,
Franco

[RES217AIII]

Good morning,
how does this outgoing NAT rule have to look like?
I'm having problems with my OPN servers: Both the old server configuration and a new instance do not connect.
Thank you

[allan]

The NAT rule is only for connecting OpenVPN users to the Internet. Access to internal resources would not go through the NAT.

Here is how I have it set under Firewall > NAT > Outbound:

1. Set the Mode to "Hybrid outbound NAT rule generation"
2. Create a Manual rule and set the following options:

• Interface = WAN
  
• TCP/IP Version = IPv4
  
• Protocol = any
  
• Source address = OpenVPN net
  
• Translation / target = Interface address
  
• (optional) Log = checked

[RES217AIII]

Thank you!