How to connect using OpenVPN (Windows 10) to OpnSense firewall.

This is a detailed guide on how to connect to your OpnSense Firewall using OpenVPN for remote access. Piggybank Cloud lets you launch an OpnSense firewall with a click of a button. You can connect your virtual machines to your firewall all with ease from your Piggybank customer portal.

There is a known issue with the latest OpenVPN version and Windows 10 with the TAP adapter not working. This guide incorporates the fix for this issue.

1. Create OpenVPN server on OpnSense firewall

1.1. Click on “Use a wizard to setup a new server.

1.2 Select Authentication Type

Type of Server – Select local User Access

1.3 Create a Certificate Authority (CA)

1.4 Add new Certificate

1.5 General OpenVPN Server Information

1.5.1 Set your interface to where VPN Clients will be connecting (usually WAN)

1.5.2 Set Protocol to UDP

1.5.3 Set the local port or leave blank

Local port upon which OpenVPN will listen for connections. The default port is 1194. Leave this blank to auto-select an unused port.

1.5.4 Description

Add your own description

1.6 Cryptographic Settings

For this example I have left as the default settings as per screenshot.


1.7 Tunnel Settings

1.7.1 Configure IPv4 Tunnel Network

This will be network assigned to OpnVPN Clients.

1.7.2 Configure IPv4 Local Network

This will be the network that will be accessed by the OpnVPN Clients, for example: the local network or LAN.

1.8 Client Settings

1.8.1 Add DNS servers

1.9 Firewall Rule Configuration

The wizard will create the firewall rules automatically for you if you check the tick boxes. This will allow traffic to the OpnVPN server and allow traffic to the Local network behind the OpnSense Firewall.

1.9.1 WAN – Rules

1.9.2 OpenVPN -Rules

1.10 OpenVPN Server Example:

Please note: Certificate depth is set to do not check – this means that the same configuration can be used for multiple users to authenticate using the same OpnVPN server configuration.

2. Create local users

2.1 Navigate to System / Access / Users and click add.

2.2 Set user name and password

This is the credentials the client will use to authenticate when connecting to the VPN.

3. Install OpenVPN on Windows 10

3.1 Download and Install an older version of OpenVPN

https://build.openvpn.net/downloads/releases/openvpn-2.1.3-install-win2k.exe

When you install this you will be prompted to install a TAP driver which is version 9.Once installed we can update to the latest version of OpenVPN

3.2 Install later Version

https://build.openvpn.net/downloads/releases/openvpn-install-2.4.7-I603.exe

Once the old version of OpenVPN is installed, install the version above.

3.3 Update the TAP drivers manually

3.3.1 Open device manager and right click TAP Windows Adapter and select update.

3.3.2 Select browse my computer for driver software

3.3.3 Point to the folder where you have saved the drivers. AMD64 for 64 bit and i386 for 32 bit.

4. Run OpenVPN GUI as administrator.



This will give you the OpenVPN icon in your windows tray. Right click the icon and click import. Before you do this you will need to download the client config from the Opnsense Firewall.

5. Download Client VPN Configuration

5.1 Navigate to VPN / OpenVPN / Client Export.

5.2 Set export type to file only.

5.3 Click on the small cloud icon to the left of the page.

5.4 Edit the Client configuration file.

5.4.1 Right click the file you have downloaded from the firewall and remove UDP from line 8 as per screen shots.

5.4.2 The config should looks as follows with x.x.x.x being you public IP of your firewall.

6. Import file for client configuration.

6.1 Right click on the OpenVPN in your system tray as per screen shot above in point 4.

6.2 Click import file and select file from download location.

7. Connect to your VPN.

7.1 Right click the OpenVPN tray icon and click connect.

7.2 Enter user credentials.

Please feel free to leave any feedback. If you would like to explore Piggybank Cloud navigate to
https://piggybank.cloud/register.php

Thank you for reading.

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Google photo

You are commenting using your Google account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s