Project

General

Profile

New Content #13270

Updated by Marcos M almost 2 years ago

If @IPv4 Local network(s)@ is empty on the server (and no custom options exist to push routes), the client @ovpn-linkup@ script does not get passed a gateway which leads to pfSense creating a gateway with the same IP address as the interface. This results in dpinger pinging ping to/from the same address, and breaks things like policy routing rules for the tunnel. 

 A workaround could be to have the server always push a route for the tunnel network itself, or modify @ovpn-linkup@ to somehow get the `route-gateway` value from the PUSH message rather than relying on the @route_vpn_gateway@ environment variable.

Back