Rogue Security Wiki

Practical procedure and troubleshooting notes for Configure a Remote Access VPN on PFsense.

  1. Log in to pfSense.
  2. Click on VPN.
    VPN menu
  3. Select OpenVPN.
    OpenVPN selection
  4. Click on Wizards.
    OpenVPN Wizard
  5. Leave the default options selected and click Next.
    Wizard defaults
  6. Create a New Certificate Authority (CA) by filling out the required information.
    Create new CA
  7. Click Next, then create a New Server Certificate by completing the form.
    Create new server certificate
  8. Click Next, then configure the VPN Server General Settings:
    • Interface: Typically WAN
    • Protocol: UDP on IPv4 only
    • Tunnel Network: The network used for VPN clients (e.g., 10.8.0.0/24)
    • Local Network: Your internal network accessible through the VPN (e.g., 192.168.1.0/24)
    • Concurrent Connections: The maximum number of simultaneous clients
    • DNS Servers: (optional) Specify DNS servers for clients
      VPN server configuration
  9. Click Next, then on the Firewall Rule Configuration page, ensure both checkboxes are selected for:
    • Firewall Rule
    • OpenVPN Rule
      Firewall rule configuration
  10. Click Next to finish the setup wizard.
    Wizard completion
  11. Once the wizard completes, click Edit next to the VPN server you just created.
    Edit VPN server
  12. Under Server Mode, select Remote Access (User Auth).
    Server mode selection
  13. Scroll down and click Save.
    Save VPN server settings
  14. Click on System.
    System menu
  15. Select User Manager.
    User Manager
  16. Click Add to create a new user.
    Add new user
  17. Fill out the user information (username, password, and optionally certificate association).
    User configuration
  18. Scroll down and click Save.
    Save new user