Core 13.0-U3.1 Networking with OpenVPN

[BazzT]

Hello,

i run a TrueNAS Core 13.0-U3.1 and the onboard OpenVPN Server at home for testing and learning. I am new with both Systems.

System:
Bare metal Truenas on I3-4130, 24GB, GA-Z97X-Gaming3, 1Gbit(Qualcomm E2201), 10Gbit(Connectx-2), EVO840250GB(Boot), 2x500GB+3xEVO840250GB(testpool)

Code:

Internet
MyFritz URL
    |
  Router
IPv4&v6 VPN Port      Wireless ---- Home Network
forwarding to NAS        /
(X.Y.127.0/24) ---- Accespoint ---- 1Gbit Home Network
    |       \___________________________________
E2201(X.Y.127.3)                                \(X.Y.127.87)
TrueNAS Connectx-2(X.Y.117.97) ---- (X.Y.117.87)Workstation   
    |
OpenVPN Server
X.Y.137.0/24
    |
Clients X.Y.137.2 <<-- ALL GET THE 2

I want that my Clients can comunicate to the Home Network. So that we can use it to join Games together, therfore i think we need Broadcast to.
For the OpenVPN Setup i have followed this Tutorial https://www.youtube.com/watch?v=YEkfW4aC9Rk.
TCP had terrible stability, so i switched to UDP i can acces the NAS with around ~ 10MBit/s.

It kind of "works", the Client can ping Systems in the Home Network but the Home Network can not ping the VPN Clients. Is there a way of getting Broadcast trough the VPN Network?
Also the VPN Clients get the same IP Adress in my VPN Servers Subnet 192.168.137.0/24 they all get 192.168.137.2.
Every client uses a seperate Client Certificate (same Root Certificate) but the user and groop of the exported openVPNClientConfig.ovpn will be the same "nobody".
Where can i change the User used for the certificate in TrueNAS/OpenVPNServer.
Will a change of nobody to testuser1/2/3 with an Text editor of the openVPNClientConfig.ovpn help to get seperate IPs?

More Information can be hand out later. Please ask for it, so i know what you need.


Kind regards,
BazzT

 

[mistermanko]

Hi, apart from posting to the wrong sub (@mods please correct), you should furthermore consult the OpenVPN documentation for this.

 

[Gr3G63]

Hi, it will maybe help, but each client must have a unique COMMON_NAME to generate certificat.
I had the same issue, and I solved it by regenerated each Client certificat with a unique COMMON_NAME

Regards