OpenVPN Site-to-Site Configuration with SSL/TLS on pfsense 2.5.2/2.6

By Stephen Fosu
Co-Founder Step Network.
Please, donate here www.snetgh.org...
Info: [e-mail]
Website www.snetgh.org
All the latest versions of pfsense will not support OpenVPN Site-to-Site Configuration with Shared Key.
The shared key mode has been deprecated by OpenVPN as it is no longer considered sufficiently secure for modern requirements.
The shared key mode will be removed from future versions of OpenVPN. Users should not create any new shared key tunnels and should immediately convert any existing shared key tunnels to SSL/TLS mode. Read more here docs.netgate.c...

[@siramdasz]

thanks for sharing, great

[@Axmezx]

Thank you!

[@senoloksuz61]

Hello, thanks for your youtube video, I have a small question for you.
We will make a site-to-site connection from 2 different places to a place with a main center, but do we need to create a server for each client side or do we need to set it from the client specific overrides section.

[@AmoahDevLabs]

Great 👍. Keep it up bros

[@snetgh]

Thanks bro

[@senoloksuz61]

Waiting for response from peer , what are we doing wrong

[@user-kl9xk3pv5z]

Pfsense sees the remote network, but the clients behind it do not(((

[@bimalsubasinghe7584]

Thank you for making a great video.I cannot ping remote lan pc which has no gateway. how can I ping them
Reply

[@salinbraga121]

Hello, I did all the steps, the VPN closes, but the server does not ping the client, however, the client manages to ping the pfsense ping to the server.
I reviewed the rules and they are all correct.

[@snetgh]

Please, can you check you pfsense logs?

[@sachinarora6682]

Hi, from where I can get tge server host address (to be entered on the client side)?

[@guaripolo69]

sadly did not work for me, stuck at waiting for peer

[@snetgh]

Please, can you share the error you got?

Great man. Saved me big time.

[@M1Ra97]

I just noticed you opened the two different pfsenses on the lan sides without using a vpn before even setting up the vpn... how is that possible?

[@despingator_]

lab environment

[@JP-ei2jz]

I followed all these steps and keep getting this error: Authenticate/Decrypt packet error: packet HMAC authentication failed

[@mcouture87]

Same here!

[@snetgh]

Hello JP and Michael sorry for the late reply. Please add the Remote Network at the server's 'IPv4 Local network(s)'

[@Imanubhav01]

Please provide payment app for wifi captive portal

[@snetgh]

Send me a private message so we can take it from there....Thanks

[@calhta]

Its 2023, dont be charging people for wifi - its rude.

[@marcosflavio]

THANKYOU!!!!