OpenVpn on Pfsense

OpenVPN is an open-source software application that is use for virtual private network (VPN) techniques for creating secure point-to-point or site-to-site connections between client and server. OpenVPN uses OpenSSL for encryption and authentication process and it can use UDP as well as TCP for transmission.OpenVPN can work through HTTP and NAT, and could go through the firewall.

First login on Pfsense.

Click on VPN and select OpenVPN

Then after Click the Wizards Tab to start the wizard

Select the desired Authentication Settings. By default, this is set to Local User Access.

Then click next

Certificate Authority Section is open

Fill in the fields to Create a new Certificate Authority

Like:- Descriptive Name, Key Length, Lifetime, Country Code, State/Province, City, Organization, E-mail.

Click on Add New CA

Server Certificate selection is open

Fill in the fields to create a new Server Certificate. Its Field same as CA entry.

Click Create new Certificate

OpenVPN Server Configuration is open

Select LAN in General OpenVPN Server Configuration

In the Tunnel Network section:

Type a new, unique network that does not exist in the current network for VPN.

In the Local Network:

Type IPv4 networks that will be accessible from the remote endpoint.

Click on Inter-client communication for Allow communication between clients connected to this server.

Type DNS server IP address.

Then click on next

Now in the traffic from clients to server section

click on Firewall Rules: Add a rule to permit connections to this OpenVPN server process from clients anywhere on the internet

and Now in the traffic from clients through VPN section

Click on OpenVPN rule: Add a rule to allow all traffic from connected clients to pass inside the VPN tunnel

Then click on next and finish.

and install openvpn-client-export package.

Now Click on System->User Manager->Users

and click on ADD

Fill in Username and Password /Confirm password for VPN user

   Click to create a user certificate.

   Fill in the Descriptive Name as the username

   Select the appropriate Certificate Authority

   Click on Save

Now click on VPN > OpenVPN-> Client Export tab.

Scroll down to the OpenVPN Clients section and select the appropriate configuration type to export.

Here we selected Current Windows Installer and downloaded.

Now install OpenVPN configuration setup on the client system.

And Type username and password on OpenVPN Authentication