pfSense » pfSense Packages

Jim,

You are correct. The VIP is there. I created the VPN before I created any CARP interfaces, so I didn't see it. Mea culpa.

I then verified the client export utility issue. Some more detail:

If I click on "Configuration" or "Configuration archive", the downloaded config file includes the correct (CARP) IP address. If I click on "Windows Installer," the config file lists the IP of the master server. (I don't have a Mac, so I don't think I can check the Viscosity bundle.)

Thanks,
==ml

And I forgot to answer your direct question:

2.0-BETA4 (amd64)
built on Sun Oct 3 18:27:52 UTC 2010
FreeBSD 8.1-RELEASE-p1

I downloaded and extracted a windows installer bundle and it, too, included the CARP VIP as the remote entry.

Perhaps when you re-ran the installer it didn't overwrite the existing config. Try uninstalling the client, manually deleting the config folder, and then installing.

I just right clicked on the installer and used 7-zip to unpack it and looked in the config folder inside.

Was not aware of 7-zip, thanks.

I've downloaded a fresh Windows Installer and looked into it with 7-zip. The config file in the new exe has the master IP, not the CARP IP.

Interesting note here:

If I run the extract from the backup firewall, I get the correct IP in the installer. It's only the master that has the incorrect IP in the installer. Weird...

It must be something in your OpenVPN instance's config. The code in question looks like this:

$interface = $settings['interface'];
if (!empty($settings['ipaddr']) && is_ipaddr($settings['ipaddr'])) {
    $server_host = $settings['ipaddr'];
} else {
    if (!$interface)
        $interface = "wan";
    $server_host = get_interface_ip($interface);
}

So somehow the variable $settings['ipaddr'] is ending up empty for your configuration.

The funny thing is, it's the exact same code for every way to generate that file. As far as I can see, there doesn't seem to be any way in the code that you can get a different reaction from that function based on the export function used. It always reads $settings from the OpenVPN config, so it shouldn't be different at all.

Make sure you clear your browser cache and delete the file from the HDD and download it again. Maybe even use a different browser.

Different browser, the problem goes away. Aaaagh, browser issue.

Sorry for the noise. Please close this ticket, with extreme prejudice.