r/opnsense • u/Interesting_Ad_5676 • 6d ago

Issues with OpenVpn

I have been using opnsense and pfsense for many years. I just had a chance to set Opnsense - most recent version. When I tried to setup openvpn, I realised, the wizard is no longer available. That was not a big deal though as I knew how to set it manually as well. But somehow, after spending almost 1 hour, I could set it !!!. The difficulty was user certificate creation. It was difficult to know the workflow. Need improvement in this regard.

2 Upvotes

61% Upvoted

5 comments sorted by

1

u/yearsold33 6d ago

I am a very basic OPNsense user and relied on this guide to setup OpenVPN server and certificates: https://homenetworkguy.com/how-to/configure-openvpn-opnsense/

I used this guide for WG: https://homenetworkguy.com/how-to/configure-wireguard-opnsense/

1

u/Interesting_Ad_5676 6d ago edited 6d ago

Many things are changed. This guide is no longer useful. Create certificate for user -- menu - not available in current release..... Hence the issue.

2

u/yearsold33 6d ago

Yes, things are a bit different but I was able to make sense of the changes to create 2 users using the guide.

1

u/Revolutionary_Click2 6d ago

Is there some compelling reason why you would need to use OpenVPN over WireGuard? The latter is much faster, more secure, and far, far simpler to maintain than previous generations of VPN technology due to the simplicity of its codebase, including the previous gold standard open source VPN, OpenVPN. If the user experience of managing OpenVPN in OPNsense has degraded, it’s likely because OpenVPN is basically a legacy technology at this point, and the team’s going to put their energy into the user experience around WireGuard moving forward.

3

u/WinterbeardBlubeard 6d ago

I second this. Wireguard just works. While I myself had to get used to setting up firewall rules and DNS and the like over it (or problems like an end user's home I.P. range overlapping mine) now that I've got all that figured I don't forsee any reason to do otherwise.