openVPN Doc's Question

[vikozo]

hello
i have been reading
https://docs.opnsense.org/manual/how-tos/sslvpn_client.html
in the example i miss somewhere to add the Public IP Adresse so the client would know where to go! did i miss something?

have a nice day
vinc

[Northguy]

You enter the port to which the server will listen and allow wan access through firewall rules. Wan IP does not matter for your setup.

[vikozo]

OK yes but my Client - should get somehow the Public IP, in my Case the opnSense WAN is also a Privat ip Range and works with my Fritzbox as exposed Host (Exposed Host is the WAN IP of the OpnSense).

have a nice day
vinc

[Northguy]

I don't fully grasp your setup. Can you clarify?

My assumption: You have a Fritzbox connected to the internet (static or dynamic IP) acting as a modem and connect the fritzbox to your OPNsense firewall?

What is WAN Ip of the fritzbox? This is the IP that you need for your client.

• OpenVPN Server on OPNsense listens to dedicated port.
• OPNsense server doesn't care what IP it is assigned, as long as VPN information is sent from Fritzbox on assigned port of OPNsense. Don't know about your fritzbox configuration, but might be something like port forward or DMZ for connected OPNsense IP.

If you need to know your public IP of your internet connection (Fritzbox) for the connecting client you either need to have a known fixed IP you always connect to, or setup a Dynamic DNS url that links up to your OPNsense and connect through that url.

[vikozo]

@nothguy
thanks for your feedback,
to setup openVPN is ok, but i have the option to download a file for my Mobile.
on android i do load this file - but as i do understand my android don't know the public ip to knock on

[Northguy]

As said, you need the public IP provided by your internet provider, or if it is a Dynamic IP, a DynDNS setup. If you use OpenVPN as a client for VPN, you can add the WAN IP of your internet provider or the dynDNS url on the 2nd tab "server list" of your configuration.

[Northguy]

In addition, your public WAN IP can be revealed with a number of available tools on the internet. Example: https://whatismyipaddress.com/

For testing purposes, you should be able to create a roadwarrior setup with your android device by adding this IP to the serverlist of the OpenVPN app.

Please note if your ISP provides you with a dynamic IP, this IP will change over time and you will need to revert to dynamic DNS solutions like https://www.duckdns.org/