PfSense OpenVPN server - how to mask external IP on client

BigT · 7 Apr 2019 at 23:54

I have an OpenVPN server on my pfSense box that works nicely with my iPad as a client. When I’m away from home I can connect in and the iPad gets a 10.0.8.x address and can access everything on my internal network at 192.168.1.x

However accessing any website on the iPad with the VPN connected reveals my remote location’s public IP. I’d rather it got routed out via my home internet connection (the pfSemse WAN interface) instead so I can watch iPlayer with it thinking I’m at home. Any ideas?

Caged · 8 Apr 2019 at 00:05

You need to configure your VPN to do a “full tunnel”

BigT · 8 Apr 2019 at 01:44

There’s an option in the server configuration labelled “force all traffic through tunnel”. Might that be it? I’m remote now so am cautious making changes that might lock me out from connecting, hence me asking rather than just trying.

ChrisD. · 8 Apr 2019 at 07:24

There's definitely an option for it, but I haven't used pfsense for a few years so can't remember the name. It'll be full tunnel or similar.

Caged · 8 Apr 2019 at 10:10

BigT said:
There’s an option in the server configuration labelled “force all traffic through tunnel”. Might that be it? I’m remote now so am cautious making changes that might lock me out from connecting, hence me asking rather than just trying.

Yes but you might have to add outbound NAT rules as well. I’d wait until you have access to the device before experimenting.