Re: [pfSense Support] OpenVPN Site-To-Site with routing

2008-12-16 Thread petes-lists
>  I'll post the next guide explaining how to setup 1 Server with many
> clients later this week.

My guide for that is here, in the 'OpenVPN Server' section:
http://thegoldenear.org/toolbox/unices/pfsense-1.2-firewall.html

It doesn't include the client-side configuration, which I've written but
not yet published.

Pete Boyd



-
To unsubscribe, e-mail: support-unsubscr...@pfsense.com
For additional commands, e-mail: support-h...@pfsense.com

Commercial support available - https://portal.pfsense.org



Re: [pfSense Support] OpenVPN Site-To-Site with routing

2008-12-14 Thread Luiz Vaz
Hi,


On Fri, Dec 12, 2008 at 7:03 AM,   wrote:
> > It's great that you wrote this tutorial. From an initial scan it looks
> > like it'll fix the issues I'm having, that I couldn't get an answer on
> > this list to on 26/11/8.
> >
> > I've only skimmed it but already I see your guide says each intranet
> needs
> > an exclusive network address, which the only existing official guide at
> >
> http://www.pfsense.org/mirror.php?section=tutorials/openvpn/pfsense-ovpn.pdf
> > doesn't explain.
> > Is it worth replacing that guide with yours?
>
>
 I've done some tests and found that the way I wrote the Guide, it will only
work for connecting One and One sites.
 The guide complaim to your purpose, because the Title is "Site To Site".

 Now I have successfully connected 1 Main site with 8 Clients.
 It keep live and reconnection is automatic from clients.

 I tried the inverse 1 Client to 2 or more Servers, but it don´t worked.
 Even specifying different TUN device names for each connection.

 But it´s working in the server either with 2 ipsec tunnels.

 What is strange too, is that ipsec don't worked on all hosts.
 Strange behaviors happened.
 One machine got to restart every time after ipsec tunnel come up.
 Others just don´t closed the tunnel.
 I guess that is a Latency problem, because all hosts with less then 10ms
worked.

 I'll post the next guide explaining how to setup 1 Server with many clients
later this week.
 I hope this helps someone.
 Because, it´s so frustanting don´t know where is problem and can't find
help.

Best Regards,
Luiz Vaz


Re: [pfSense Support] OpenVPN Site-To-Site with routing

2008-12-12 Thread Chris Buechler
On Fri, Dec 12, 2008 at 7:03 AM,   wrote:
> It's great that you wrote this tutorial. From an initial scan it looks
> like it'll fix the issues I'm having, that I couldn't get an answer on
> this list to on 26/11/8.
>
> I've only skimmed it but already I see your guide says each intranet needs
> an exclusive network address, which the only existing official guide at
> http://www.pfsense.org/mirror.php?section=tutorials/openvpn/pfsense-ovpn.pdf
> doesn't explain.
> Is it worth replacing that guide with yours?
>

There is a lot of outdated or incomplete information out there, I'll
be cleaning it up at some point in the coming months and will consider
that then.

-
To unsubscribe, e-mail: support-unsubscr...@pfsense.com
For additional commands, e-mail: support-h...@pfsense.com

Commercial support available - https://portal.pfsense.org



Re: [pfSense Support] OpenVPN Site-To-Site with routing

2008-12-12 Thread Chris Buechler
On Fri, Dec 12, 2008 at 6:34 AM, Luiz Vaz  wrote:
> Ok,
>
>   now it´s in the right place:
>   http://doc.pfsense.org/index.php/OpenVPNSiteToSite
>

Thanks!

-
To unsubscribe, e-mail: support-unsubscr...@pfsense.com
For additional commands, e-mail: support-h...@pfsense.com

Commercial support available - https://portal.pfsense.org



Re: [pfSense Support] OpenVPN Site-To-Site with routing

2008-12-12 Thread petes-lists
It's great that you wrote this tutorial. From an initial scan it looks
like it'll fix the issues I'm having, that I couldn't get an answer on
this list to on 26/11/8.

I've only skimmed it but already I see your guide says each intranet needs
an exclusive network address, which the only existing official guide at
http://www.pfsense.org/mirror.php?section=tutorials/openvpn/pfsense-ovpn.pdf
doesn't explain.
Is it worth replacing that guide with yours?

Pete Boyd



-
To unsubscribe, e-mail: support-unsubscr...@pfsense.com
For additional commands, e-mail: support-h...@pfsense.com

Commercial support available - https://portal.pfsense.org



Re: [pfSense Support] OpenVPN Site-To-Site with routing

2008-12-12 Thread Luiz Vaz
Ok,

  now it´s in the right place:
  http://doc.pfsense.org/index.php/OpenVPNSiteToSite

  I hope, ;-)

Att,
Luiz Vaz

2008/12/10 Luiz Vaz 

> Sorry,
>
>   thanks anyway!
>
>
> 2008/12/10 Chris Buechler 
>
> On Wed, Dec 10, 2008 at 4:07 PM, Luiz Vaz  wrote:
>> > Hi all,
>> >
>> >   after reading some info here and there, I finally put my VPN up and
>> > running.
>> >
>> >   Some sites are using IPSEC, and others with big latency are using
>> OpenVPN.
>> >
>> >   So I wrote a wiki about it (OpenVPN part).
>> >
>> >   I hope this helps beginners to deal with OpenVPN Site-To-Site:
>> >   http://devwiki.pfsense.org/OpenVPNSiteToSite
>> >
>>
>> That's the developer only wiki, please put that on doc.pfsense.org (I
>> emailed you account info offlist).
>>
>> -
>> To unsubscribe, e-mail: support-unsubscr...@pfsense.com
>> For additional commands, e-mail: support-h...@pfsense.com
>>
>> Commercial support available - https://portal.pfsense.org
>>
>>
>


Re: [pfSense Support] OpenVPN Site-To-Site with routing

2008-12-10 Thread Luiz Vaz
Sorry,

  thanks anyway!


2008/12/10 Chris Buechler <[EMAIL PROTECTED]>

> On Wed, Dec 10, 2008 at 4:07 PM, Luiz Vaz <[EMAIL PROTECTED]> wrote:
> > Hi all,
> >
> >   after reading some info here and there, I finally put my VPN up and
> > running.
> >
> >   Some sites are using IPSEC, and others with big latency are using
> OpenVPN.
> >
> >   So I wrote a wiki about it (OpenVPN part).
> >
> >   I hope this helps beginners to deal with OpenVPN Site-To-Site:
> >   http://devwiki.pfsense.org/OpenVPNSiteToSite
> >
>
> That's the developer only wiki, please put that on doc.pfsense.org (I
> emailed you account info offlist).
>
> -
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
>
> Commercial support available - https://portal.pfsense.org
>
>


Re: [pfSense Support] OpenVPN Site-To-Site with routing

2008-12-10 Thread Chris Buechler
On Wed, Dec 10, 2008 at 4:07 PM, Luiz Vaz <[EMAIL PROTECTED]> wrote:
> Hi all,
>
>   after reading some info here and there, I finally put my VPN up and
> running.
>
>   Some sites are using IPSEC, and others with big latency are using OpenVPN.
>
>   So I wrote a wiki about it (OpenVPN part).
>
>   I hope this helps beginners to deal with OpenVPN Site-To-Site:
>   http://devwiki.pfsense.org/OpenVPNSiteToSite
>

That's the developer only wiki, please put that on doc.pfsense.org (I
emailed you account info offlist).

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Commercial support available - https://portal.pfsense.org



[pfSense Support] OpenVPN Site-To-Site with routing

2008-12-10 Thread Luiz Vaz
Hi all,

  after reading some info here and there, I finally put my VPN up and
running.

  Some sites are using IPSEC, and others with big latency are using OpenVPN.

  So I wrote a wiki about it (OpenVPN part).

  I hope this helps beginners to deal with OpenVPN Site-To-Site:
  http://devwiki.pfsense.org/OpenVPNSiteToSite

  Please, are everyone free to correct typos and mistakes.

Best Regards,
Luiz Vaz