I have a small network in Azure that I need to grant access to. Because most of the people in my office use Macbooks, the Microsoft VPN gateway is not going to work.
To enable a VPN connection, I have created a VM running the pfSense image.
I am able to connect to the Web Server exposed by this VM and configure the pfSense OpenVPN server.
However, I am unable to connect to the OpenVPN server to make a connection. In the Open VPN connect screen I get the following:
Wed Aug 31 15:49:00 2016 TCP: connect to [AF_INET]nnn.nnn.nnn.nnn:1194 failed, will try again in 5 seconds: Connection timed out (WSAETIMEDOUT)
I have:
- Verified that the nnn.nnn.nnn.nnn is the public IP address of the pfSense VM
- SSH'd into the VM and verified that it is listening on port 1194
USER COMMAND PID FD PROTO LOCAL ADDRESS FOREIGN ADDRESS root openvpn 3403 6 tcp4 *:1194 *:* root nginx 23708 6 tcp4 *:443 *:* root nginx 23708 8 tcp4 *:80 *:* root sshd 13231 5 tcp4 *:22 *:*
- Checked the Network Security Group for the VM's subnet. Confirmed that it allows any protocol, any source to pass over 1194
- Checked the Network Security Group for the VM's network interface. Confirmed that it is set to 'None'
- Verified that I can locally connect to port 1194
- Verified that I can remotely connect on port 443 (remember that I can connect to the VM's web server)
- From an AppServices console (has a connection configured to the VNET), I can connect to 80 & 443, but not 1194 (connection timeout).
- I see no indications in the pfSense logs that a connection attempt was made.
- Running pfTop when SSH'd to the VM shows connection attempts for 80 & 443, but not for 1194.
I believe that something in my Virtual Network setup is blocking traffic on 1194, but I'm not sure where else to check.