Using OpenVPN Cloud profile to configure pfSense

Introduction

Many of our users have expressed interest in using OpenVPN compatible routers to connect to OpenVPN Cloud instead of using the Connector application.

While connecting in this manner may not yield the best performance, due to the limited processing power and memory of the router, it could be useful in the cases where convenience, rather than high throughput, is required.

Please note that the information provided here is for EDUCATION and INFORMATIONAL uses only. We are not responsible for any damages you incur as a result of using these instructions here. For technical support, you need to contact the supplier of the router or the appropriate community forums.

It is not guaranteed that all versions of the firmware will work as expected with OpenVPN Cloud and some features may be incompatible. It is best to update the firmware to the latest version.

Downloading the Connector profile

To configure the routers you need to use specific sections of the OpenVPN Cloud Connector profile in specific setting configurations.

First, you need to download the profile in .ovpn format from the Network configuration you have created in the Administration portal to represent the router’s network.

The profile can be downloaded by selecting it as the option in the drop-down list shown after clicking on the download icon. See, picture.

Open the downloaded profile file in a text editor. In Windows, the file must be opened in a text editor other than Notepad (e.g. Wordpad / Notepad++).

Configuring pfSense

1. From the main menu go to System → Cert. Manager
2. CAs → Add
3. Select Method “Import an existing Certificate Authority”
4. Set some “Descriptive name”
5. Copy the next data from the connector’s profile: everything between to “Certificate Authority”
6. Save
7. Certificates → Add
8. Select Method “Import an existing Certificate”
9. Set some “Descriptive name”
10. Copy the next data from the connector’s profile: everything between to “Certificate data” and between to “Private key data”
11. Save
12. From the main menu go to VPN → OpenVPN
13. Select Clients → Add a client
14. Enter preferable PGMT in the “Server host or address” field
15. Uncheck “Automatically generate a TLS Key”
16. Copy the next data from the connector’s profile: everything between to “TLS Key”
17. Select your Certificate Authority in the “Peer Certificate Authority” drop down menu
18. Select your Certificate in the “Client Certificate” drop down menu
19. Select “AES-256-GCM” in the “Encryption Algorithm” drop down menu
20. Select “SHA256” in the “Auth Digest Algorithm” drop down menu
21. Select “Disable Compression” in the “Compression” drop down menu
22. Save
23. From the main menu go to Status → OpenVPN
24. Ensure that OpenVPN service is up and Virtual IP Addresses are assigned