pfSense

For an override on a subnet topology VPN, the mask on the tunnel network in the override has to reflect the subnet mask of the VPN tunnel network. However, when saving the override the entered address is being changed to the network address of the given subnet/mask, losing the actual address the user wants.

e.g. Enter 10.40.104.100/24 and it ends up 10.40.104.0/24.

Using /32 does not work as OpenVPN will not properly use the address+mask and it sets it up with the wrong values.

If you ignore the remote network field and add a proper advanced config entry of ifconfig-push 10.40.104.100 255.255.255.0 then it works properly.

This was changed on #11416 but it probably should have only been changed on the server and client pages not on the override page.