Setting Up An OpenVPN Client in pfSense

[anon78696914]

Ok, you installed pfSense and are wondering what else you can do with it.

Or, You have a VPN and want to have a few devices on a VPN but not everything on the network.

This is an easier way to manage this instead of a device by device basis. Also handy if setting up a device that would be too cumbersome to maintain.

if you haven't installed it look here:

PFsense/Snort Setup

Hey guys, I wanted to get everyone's opinion on my PFsense/Snort setup. Its my first rodeo for an IPS so be gentle. My primary goal is to have others ok this setup for best practices/best configurations, I have used snort guides on the net but some are outdated at this point and several heads are better than one right? The blotted images are private IP addresses on the logs page. My main concern is that there are large amounts of alert events but not all IP addresses get blocked, which worries me that whatever probing they are preforming is getting through or not being stopped by Snort. So here goes: WAN setup [image] [image] [image] [image] LAN Setup [image] [image] [image] [image]

This will be based around using Private Internet Access because that is popular and what I pay for. An OpenVPN server in the cloud or another service will work the cert and server addresses will change though.

I am going to do a little something different this guide and do it with pictures.

Let's begin

https://www.privateinternetaccess.com/openvpn/openvpn.zip

This gibberish is the certificate that is trusted as an authority.

User Name and Password of VPN

Edit @Dexter_Kane added some more info for using other VPN servers:

I would add that you can make this guide universal quite easaly. All you need to do is open the .ovpn file from whatever service you're using and match the configuration. Any options that don't appear in the GUI can be added in the advanced section with a semi colon separating each one. For example: [image]

Dulplicate all other WAN interfaces and Apply changes

---

OK, we got OpenVPN up and running now to assign devices

Do the same changing the alias and gateway for your non VPN devices and apply changes

Thats it!

Double check the IP's of your device so they are correct

Have problems? Comments? Easier way?

Post

[anon78696914]

@MFZuul & @wendell There made the guide. Happy now?

[MFZuul]

Very

[Freaksmacker]

What is cli net ?

[MFZuul]

idk

[anon78696914]

where

[Freaksmacker]

in the title :) Thought maybe it was a linux term I was not familiar with ?

[anon78696914]

Client, typo guess there has to be one on a guide this long.

Fixed though

[TheCaveman]

Cool guide. I used a youtube video series to setup OpenVPN but its cool to have another good, comprehensive resource on how to do this. Good guide!

[Freaksmacker]

I still am correcting mine :)

[MisteryAngel]

Awesome guide, thanks for that.
Keep up the good work!.

[Dexter_Kane]

I would add that you can make this guide universal quite easaly. All you need to do is open the .ovpn file from whatever service you're using and match the configuration. Any options that don't appear in the GUI can be added in the advanced section with a semi colon separating each one. For example:

[anon78696914]

I did make mention of other VPN servers but I didn't go into detail. Do you mind if I add your post to the main one?

[Dexter_Kane]

Sure

[anon78696914]

Added and thanks

[MichaelLindman]

Nice write up, I'm planning to setup my pfSense box as an OpenVPN client sometime this year when I get some time but I'll likely wait until after 2.4 is released before I do it.

[Freaksmacker]

I was thinking open vpn just recently updated their client.