# VPNs **URL:** https://community.ipfire.org/c/vpn/6.md?page=1 [Latest](https://community.ipfire.org/latest.md) · [Categories](https://community.ipfire.org/categories.md) **Page:** 2 --- ## [VPN: Roadwarrior Statistics](https://community.ipfire.org/t/vpn-roadwarrior-statistics/15836)
**Author:** [@phantom](https://community.ipfire.org/u/phantom)\ **Replies:** 2\ **Last updated:** [31 May 2026 21:45 UTC](https://community.ipfire.org/t/vpn-roadwarrior-statistics/15836 "2026-05-31T21:45:14Z")
Will there be a graph at some point for WireGuard like there is for OpenVPN as seen at this IPFire Documentation link: www.ipfire.org - OpenVPN Client statistics - VPN: Roadwarrior Statistics ? The addition of WireGuard… --- ## [Wireguard does not restart after Red down](https://community.ipfire.org/t/wireguard-does-not-restart-after-red-down/15679)
**Author:** [@femi](https://community.ipfire.org/u/femi)\ **Replies:** 7\ **Last updated:** [27 May 2026 03:40 UTC](https://community.ipfire.org/t/wireguard-does-not-restart-after-red-down/15679 "2026-05-27T03:40:37Z")
When the Red connection is broken and chomes back all Wireguard connections are green, but there is no connection to the opposite point. I tried to restart the Service with a Script, but it is not working. /usr/local/b… --- ## [Manually Create IPSec Root and Host Certificates](https://community.ipfire.org/t/manually-create-ipsec-root-and-host-certificates/15795)
**Author:** [@wtme4](https://community.ipfire.org/u/wtme4)\ **Replies:** 7\ **Last updated:** [24 May 2026 12:10 UTC](https://community.ipfire.org/t/manually-create-ipsec-root-and-host-certificates/15795 "2026-05-24T12:10:00Z")
Hi everybody! First, thank you, especially the developers for IPFire. I’m happy to use the firewall system for multiple years. (Fujitsu Futro S920/S930 work so flawless.) In the past, the IPSec Root certificates were v… --- ## [OpenVPN Connect 3.8.0(4528) on Windows11 + IPFire CU202 Development Build](https://community.ipfire.org/t/openvpn-connect-3-8-0-4528-on-windows11-ipfire-cu202-development-build/15810)
**Author:** [@tphz](https://community.ipfire.org/u/tphz)\ **Replies:** 1\ **Last updated:** [24 May 2026 10:50 UTC](https://community.ipfire.org/t/openvpn-connect-3-8-0-4528-on-windows11-ipfire-cu202-development-build/15810 "2026-05-24T10:50:19Z")
Today I tested the OpenVPN Connect client setup on Windows 11 I based my next steps on the following posts/threads The following steps resolved the issues with the “Username” and “Password” prompts and the “CA… --- ## [OpenVPN in iPhone with core 201](https://community.ipfire.org/t/openvpn-in-iphone-with-core-201/15806)
**Author:** [@roberto](https://community.ipfire.org/u/roberto)\ **Replies:** 4\ **Last updated:** [23 May 2026 17:10 UTC](https://community.ipfire.org/t/openvpn-in-iphone-with-core-201/15806 "2026-05-23T17:10:51Z")
Good evening. I’m trying to configure an OpenVPN certificate generated with the Core201 on an iPhone, and I’m having no luck. Does anyone know how to install it? Thanks in advance. --- ## [IPSec/Strongswan updown errors in log](https://community.ipfire.org/t/ipsec-strongswan-updown-errors-in-log/1645)
**Author:** [@trymes](https://community.ipfire.org/u/trymes)\ **Replies:** 7\ **Last updated:** [22 May 2026 17:02 UTC](https://community.ipfire.org/t/ipsec-strongswan-updown-errors-in-log/1645 "2026-05-22T17:02:25Z")
While digging around in the logs for something else, I stumbled across a number of messages like this: Mar 16 08:09:51 myhost charon: 15\[CHD\] updown: iptables: Bad rule (does a matching rule exist in that chain?). Mar 1… --- ## [OPENVPN RoadWarrior please help](https://community.ipfire.org/t/openvpn-roadwarrior-please-help/15563)
**Author:** [@rookie2026](https://community.ipfire.org/u/rookie2026)\ **Replies:** 21\ **Last updated:** [19 May 2026 20:43 UTC](https://community.ipfire.org/t/openvpn-roadwarrior-please-help/15563 "2026-05-19T20:43:50Z")
I am still in the learning phase and currently conducting research. My objective is to access the network behind IPFire. I am following the provided instructions, but when attempting to connect using the OpenVPN client, … --- ## [MacOS Tahoe 26.5 - IPSec VPN stopped working on new VPN connections](https://community.ipfire.org/t/macos-tahoe-26-5-ipsec-vpn-stopped-working-on-new-vpn-connections/15802)
**Author:** [@jon](https://community.ipfire.org/u/jon)\ **Replies:** 0\ **Last updated:** [19 May 2026 18:46 UTC](https://community.ipfire.org/t/macos-tahoe-26-5-ipsec-vpn-stopped-working-on-new-vpn-connections/15802 "2026-05-19T18:46:35Z")
This is probably more a Mac issue than an IPFire CU201 issue but I am wondering if Mac users in the Community are seeing the same. (There is a small possibility it is related to IPFire but I cannot find it) I was on Ma… --- ## [When changing ISPs, will OpenVPN have to be redone from scratch?](https://community.ipfire.org/t/when-changing-isps-will-openvpn-have-to-be-redone-from-scratch/15784)
**Author:** [@bloater99](https://community.ipfire.org/u/bloater99)\ **Replies:** 7\ **Last updated:** [18 May 2026 19:21 UTC](https://community.ipfire.org/t/when-changing-isps-will-openvpn-have-to-be-redone-from-scratch/15784 "2026-05-18T19:21:54Z")
Or will changing FQDN in the OpenVPN Settings page suffice? I feel like that would be too easy, that there are aspects of the certificates that are tied to the old ISP. This change for our company will be happening in … --- ## [OpenVPN with iPhone or iPad](https://community.ipfire.org/t/openvpn-with-iphone-or-ipad/15371)
**Author:** [@wruthensteiner](https://community.ipfire.org/u/wruthensteiner)\ **Replies:** 2\ **Last updated:** [17 May 2026 22:06 UTC](https://community.ipfire.org/t/openvpn-with-iphone-or-ipad/15371 "2026-05-17T22:06:40Z")
Hi! I am trying to follow the configuration guides in the documentation to connect with my iPhone via OpenVPN. The guides do not seem to be up to date, especially since core update 197. Whatever I try, I just can’t get … --- ## [Bypassing outside cblocks on VPN](https://community.ipfire.org/t/bypassing-outside-cblocks-on-vpn/15776)
**Author:** [@praful](https://community.ipfire.org/u/praful)\ **Replies:** 0\ **Last updated:** [12 May 2026 05:32 UTC](https://community.ipfire.org/t/bypassing-outside-cblocks-on-vpn/15776 "2026-05-12T05:32:53Z")
I have both wireguard and OpenVPN setup on ipfire. Very occasionally when I connect to other organisations’ WiFi, I won’t be able to use either VPN. I changed OpenVPN to use port 443 and that has helped most of the time… --- ## [Wireguard VPN net-to-net local/remote subnets question](https://community.ipfire.org/t/wireguard-vpn-net-to-net-local-remote-subnets-question/15599)
**Author:** [@freypk](https://community.ipfire.org/u/freypk)\ **Replies:** 20\ **Last updated:** [3 May 2026 20:48 UTC](https://community.ipfire.org/t/wireguard-vpn-net-to-net-local-remote-subnets-question/15599 "2026-05-03T20:48:07Z")
Hi, I try to configure a IPFire net-to-net setup, but I do not understand what I have to specify for local/remote subnet parameters. My setup is as follows: I need to route all networks (orange, green & blue) betwe… --- ## [\[Feature Request\] OpenVPN N2N: add "push ifconfig" to server config](https://community.ipfire.org/t/feature-request-openvpn-n2n-add-push-ifconfig-to-server-config/15743)
**Author:** [@madsci](https://community.ipfire.org/u/madsci)\ **Replies:** 0\ **Last updated:** [3 May 2026 20:15 UTC](https://community.ipfire.org/t/feature-request-openvpn-n2n-add-push-ifconfig-to-server-config/15743 "2026-05-03T20:15:04Z")
Hi Ipfire developers Thank you for the great project, I operate 2 Ipfire FW and 1 OPNsense FW, all connected to each other by n2n OpenVPN tunnels. In order to setup a n2n VPN tunnel between Ipfire (server) and OPNsense … --- ## [Wireguard - Cannot reach far side of N2N IPSec Tunnel](https://community.ipfire.org/t/wireguard-cannot-reach-far-side-of-n2n-ipsec-tunnel/15726)
**Author:** [@trymes](https://community.ipfire.org/u/trymes)\ **Replies:** 2\ **Last updated:** [30 April 2026 16:01 UTC](https://community.ipfire.org/t/wireguard-cannot-reach-far-side-of-n2n-ipsec-tunnel/15726 "2026-04-30T16:01:55Z")
I have finally gotten RW clients working via Wireguard. “Allowed Subnets” is set to “0.0.0.0/0” for these clients. They can reach the local subnets, and the internet through the IPFire machine. However, this IPFire machi… --- ## [Wireguard - Cannot Reach Green Except IPFire Itself](https://community.ipfire.org/t/wireguard-cannot-reach-green-except-ipfire-itself/15342)
**Author:** [@trymes](https://community.ipfire.org/u/trymes)\ **Replies:** 9\ **Last updated:** [30 April 2026 15:20 UTC](https://community.ipfire.org/t/wireguard-cannot-reach-green-except-ipfire-itself/15342 "2026-04-30T15:20:51Z")
I swapped over to a new desktop today, and after having used IPSec extensively for years for Net-to-Net, and less extensively for Host-to-Net, I had issues setting up my connection. I also noticed that Trail of Bits’ Alg… --- ## [IPfire net-to-net via WireGuard with Fritz box LTE](https://community.ipfire.org/t/ipfire-net-to-net-via-wireguard-with-fritz-box-lte/15700)
**Author:** [@oleg](https://community.ipfire.org/u/oleg)\ **Replies:** 1\ **Last updated:** [24 April 2026 13:14 UTC](https://community.ipfire.org/t/ipfire-net-to-net-via-wireguard-with-fritz-box-lte/15700 "2026-04-24T13:14:07Z")
I want to set up a net-to-net connection between several LTE FritzBoxes and an IPFire. The IPFire will be located at the central office and will receive information that way. So far, I haven’t been able to connect even a… --- ## [Advised VPN Service Net to Net](https://community.ipfire.org/t/advised-vpn-service-net-to-net/15685)
**Author:** [@diver](https://community.ipfire.org/u/diver)\ **Replies:** 4\ **Last updated:** [24 April 2026 12:59 UTC](https://community.ipfire.org/t/advised-vpn-service-net-to-net/15685 "2026-04-24T12:59:13Z")
What VPN solution is the best/advised choice when doing a Net to Net with 2 IPFire solutions. --- ## [Wireguard Net-To-Net IPFire \<-\> FritzBox](https://community.ipfire.org/t/wireguard-net-to-net-ipfire-fritzbox/15683)
**Author:** [@odongarma](https://community.ipfire.org/u/odongarma)\ **Replies:** 0\ **Last updated:** [23 April 2026 07:31 UTC](https://community.ipfire.org/t/wireguard-net-to-net-ipfire-fritzbox/15683 "2026-04-23T07:31:29Z")
Hello Community! I was able to create a wireguard tunnel between my ipfire appliance and a remote Fritzbox. The Fritzbox was creating the config and on the ipfire side i only imported the config file. At first the con… --- ## [OpenVPN connection name should accept hyphens and/or underscores](https://community.ipfire.org/t/openvpn-connection-name-should-accept-hyphens-and-or-underscores/15659)
**Author:** [@miket](https://community.ipfire.org/u/miket)\ **Replies:** 0\ **Last updated:** [10 April 2026 04:52 UTC](https://community.ipfire.org/t/openvpn-connection-name-should-accept-hyphens-and-or-underscores/15659 "2026-04-10T04:52:06Z")
The following is actually a bug report that I was almost ready to submit until I noticed that the bugzilla discloses the email addresses of commenters. I object to that, so I’m posting here. It would be very desirable … --- ## [IPSEC Site-To\_Site Missing Remote Subnet setting](https://community.ipfire.org/t/ipsec-site-to-site-missing-remote-subnet-setting/15587)
**Author:** [@sailingcheese](https://community.ipfire.org/u/sailingcheese)\ **Replies:** 3\ **Last updated:** [10 March 2026 15:47 UTC](https://community.ipfire.org/t/ipsec-site-to-site-missing-remote-subnet-setting/15587 "2026-03-10T15:47:11Z")
In Core-Update 198 IPsec tunnel settings there is a Remote subnet option. In Core-Update 200 IPsec tunnel this field is missing??? It is replaced by a DNS Servers field… (The remote subnet field is gone !!) Where can… --- ## [OpenVPN Roadwarrior server issue](https://community.ipfire.org/t/openvpn-roadwarrior-server-issue/15545)
**Author:** [@cashmoney](https://community.ipfire.org/u/cashmoney)\ **Replies:** 20\ **Last updated:** [6 March 2026 14:54 UTC](https://community.ipfire.org/t/openvpn-roadwarrior-server-issue/15545 "2026-03-06T14:54:04Z")
Since upgrading IPFire to 2.29 and Core 200 our OpenVPN has decided to enter a loop anytime someone attempts to connect with it, \[ Thu Mar 5 08:29:37 2026 SENT CONTROL \[hostname\]: ‘PUSH\_REQUEST’ (status=1) \] eventuall… --- ## [Wireguard VPN Split Tunnel Script](https://community.ipfire.org/t/wireguard-vpn-split-tunnel-script/15508)
**Author:** [@zoot](https://community.ipfire.org/u/zoot)\ **Replies:** 0\ **Last updated:** [21 February 2026 21:08 UTC](https://community.ipfire.org/t/wireguard-vpn-split-tunnel-script/15508 "2026-02-21T21:08:32Z")
I just thought I would share a script I’ve created and been using for a while now on IPFire in the event its useful to someone else. The background is that I’ve wanted for a while now to move the connection for the VPN … --- ## [Wireguard - small hints for various configurations](https://community.ipfire.org/t/wireguard-small-hints-for-various-configurations/15506)
**Author:** [@tphz](https://community.ipfire.org/u/tphz)\ **Replies:** 0\ **Last updated:** [20 February 2026 22:10 UTC](https://community.ipfire.org/t/wireguard-small-hints-for-various-configurations/15506 "2026-02-20T22:10:02Z")
I have collected tips from several of my posts on various configurations for Roadwarrior client access to the GREEN IPFireB network via IPFireA. WireGuardClient--WireGuardHost2Net--IPFireA--WireguardNet2Net--IPFireB--G… --- ## [N2N connection "connected" but no remote connectivity](https://community.ipfire.org/t/n2n-connection-connected-but-no-remote-connectivity/15504)
**Author:** [@josc](https://community.ipfire.org/u/josc)\ **Replies:** 6\ **Last updated:** [20 February 2026 19:56 UTC](https://community.ipfire.org/t/n2n-connection-connected-but-no-remote-connectivity/15504 "2026-02-20T19:56:17Z")
Dear forum, i am reaching out because of an essentially nonfunctional net-to-net-connection between two Ipfires. Ipfire1 (green subnet is 192.168.111.0/24) is behind a normal IPV4-Telekom-DSL connection with dynamic DN… --- ## [FYI: IPFire vs. OpenVPN 2.7 Client](https://community.ipfire.org/t/fyi-ipfire-vs-openvpn-2-7-client/15501)
**Author:** [@larsen](https://community.ipfire.org/u/larsen)\ **Replies:** 2\ **Last updated:** [20 February 2026 10:43 UTC](https://community.ipfire.org/t/fyi-ipfire-vs-openvpn-2-7-client/15501 "2026-02-20T10:43:12Z")
Upgraded my OpenVPN client from 2.6.19 to 2.7.0, and until now I didn’t notice any problems running this version against “IPFire 2.29 (x86\_64) - Core-Update 197” running OpenVPN 2.6.14. Just wanted to let you know so an… --- ## [Forwarding Wire Guard VPN Server From Green To Red](https://community.ipfire.org/t/forwarding-wire-guard-vpn-server-from-green-to-red/15494)
**Author:** [@rapter001](https://community.ipfire.org/u/rapter001)\ **Replies:** 4\ **Last updated:** [18 February 2026 13:50 UTC](https://community.ipfire.org/t/forwarding-wire-guard-vpn-server-from-green-to-red/15494 "2026-02-18T13:50:11Z")
Hi i see, to not be able to forwarded my wire guard vpn server that’s connected to green to expose to red i know the vpn server is working fully because it routes traffic in lan i dont want to use dmz this is my current … --- ## [OpenVPN Roadwarrior Connections Log weirdness](https://community.ipfire.org/t/openvpn-roadwarrior-connections-log-weirdness/15485)
**Author:** [@bloater99](https://community.ipfire.org/u/bloater99)\ **Replies:** 4\ **Last updated:** [16 February 2026 21:21 UTC](https://community.ipfire.org/t/openvpn-roadwarrior-connections-log-weirdness/15485 "2026-02-16T21:21:31Z")
I just noticed that if I select a single user in the OVPN Connections Log page, it does not show that single user’s connection logs. It still shows all users for the time period selected. The columns change, though. I… --- ## [Wireguard N2N setup inside LAN](https://community.ipfire.org/t/wireguard-n2n-setup-inside-lan/15486)
**Author:** [@johnytheboar](https://community.ipfire.org/u/johnytheboar)\ **Replies:** 4\ **Last updated:** [14 February 2026 16:54 UTC](https://community.ipfire.org/t/wireguard-n2n-setup-inside-lan/15486 "2026-02-14T16:54:50Z")
Hello I have the house owner network setup LAN is 10.100.102.0/24 . In my private floor/apartment iv set up two different ipfire networks under that house LAN because i dont want to be in the same network with him … --- ## [Understanding firewall rules: no routing between WireGuard and GREEN zone (solved)](https://community.ipfire.org/t/understanding-firewall-rules-no-routing-between-wireguard-and-green-zone-solved/15427)
**Author:** [@damb](https://community.ipfire.org/u/damb)\ **Replies:** 29\ **Last updated:** [14 February 2026 16:35 UTC](https://community.ipfire.org/t/understanding-firewall-rules-no-routing-between-wireguard-and-green-zone-solved/15427 "2026-02-14T16:35:26Z")
Hello, I have recently started using IpFire, and I’m having trouble understanding how firewall rules work. I’ve set up a WireGuard service (Purple), and I can connect remotely and access the internet. However, I’m having… --- ## [New password request despite saving](https://community.ipfire.org/t/new-password-request-despite-saving/15468)
**Author:** [@rainerk](https://community.ipfire.org/u/rainerk)\ **Replies:** 4\ **Last updated:** [9 February 2026 16:25 UTC](https://community.ipfire.org/t/new-password-request-despite-saving/15468 "2026-02-09T16:25:23Z")
Hello, In version IPFire 2.27 (x86\_64) - Core Update 169 / OpenVPN Client 2.5.7, despite saving the password, after a considerable amount of time the password is suddenly requested again. Does anyone know why? Thanks f… [Previous page](https://community.ipfire.org/c/vpn/6.md) [Next page](https://community.ipfire.org/c/vpn/6.md?page=2)