OpenVPN gateway issue

[pierrefrancois]

Hi,

I've found a strange problem with OpenVPN.
I've setup OpenVPN as a client on OPNsense.
If I keep the field "IPv4 Remote Network/s" empty, the OPNsense web interface will report the wrong ipv4 gateway for the interface ovpncX
In "Status > Interface" and "Status > Gateway" the gateway IP displayed is the Network mask (for example 255.255.255.0).
In console, using ifconfig I can see the interface gateway is correct and I can ping the remote gateway.

The issue is that apinger use the value found in the web interface to measure the availability, using the option to ping the gateway result in the ovpncX interface always down.

If I input anything in the field "IPv4 Remote Network/s" then the gateway is displayed correctly. I use this as a workaround at the moment i just input 4.4.4.4/32 in remote network and the gateway is displayed correctly.

I haven't been able to pinpoint the root cause yet but it seems the issue is in the way OPNsense get the gateway IP from OpenVPN after the connection is established.

I couldn't check the status for IPv6 as the VPN server i've used does not implement it.

Let me know if you need me to run some test.

[franco]

Your analysis sounds logical. For now, I've added a ticket to keep track of it: https://github.com/opnsense/core/issues/378