Connect pfSense to VPN Provider (OpenVPN Client) - Full Setup

This video will show you how to connect to a vpn provider using the OpenVPN client in pfSense.

Are you looking for a secure way to connect to the internet while protecting your privacy in 2023? In this video, we will show you how to set up pfSense to connect to a VPN provider such as Private Internet Access or NordVPN using the OpenVPN client built into pfSense. By the end of this tutorial, you will be able to encrypt your online traffic and keep your data safe from prying eyes.

We'll also show you how to set up a kill switch to ensure that your internet connection is blocked if the VPN connection drops, preventing any unencrypted data from being transmitted. By the end of this tutorial, you'll have a secure, reliable VPN connection that protects your data and privacy. So, let's get started and set up your VPN with a kill switch in pfSense!

TIMESTAMPS
00:00 - Thoughts on VPN Providers
01:30 - Downloading PIA OpenVPN Configuration file
03:05 - Installing the Providers' Certificate Authority
04:10 - Set up and configure the OpenVPN Client within pfSense
07:50 - Assigning an interface to the OpenVPN Client
09:06 - Set up aliases for client endpoints going through VPN
10:10 - Set up firewall rules for policy based routing via VPN
11:47 - Applying traffic tag for start of killswitch setup
13:10 - Setting up outbound Network Address Translation (NAT)
14:58 - Testing the IP address is that of the VPN provider
16:00 - Implenting the kill switch
17:30 - Testing the kill (no vpn taffic allowed out the wan)
18:20 - Changing the country for the VPN client
19:50 - Final thoughts about VPN providers

If you'd like to hire us, please head over to our website and fill out the contact form.

If you found this video useful please hit the like button and consider subscribing to our channel.

=== SUPPORT OUR CHANNEL ===
Support our channel by joining our YouTube channel membership to donate a small amount each month. Not only does your support help us continue creating content you love, but as a channel member, you'll also enjoy early access to our videos. While our videos are scheduled for regular days and times, becoming a channel member allows you to watch them as soon as they are uploaded. Your support truly makes all the difference!

Channel Membership:

Patreon:

=== GET IN TOUCH ===
📣 Hire Us: Hire us for a Project

📣 Forums: Discussion on Videos

📣 Facebook: Follow Us on Facebook

📣 LinkedIn: Connect with us on LinkedIn

📣 Twitter: Get in touch on X (Twitter)

📣 Website: Our Website
===

=== AFFILIATES & REFERRALS ===
This video is NOT sponsored. Some product links are affiliate links which means if you buy something we'll receive a small commission.

Sheridan Computers Swag Store on Amazon:

🛍️ Amazon Affiliate Store: Products We Use

AUDIO AND VIDEO
🎧 AE Juice: animation tools, plugins and presets

CLOUD HOSTING, SERVERS AND STORAGE
☁️ Digital Ocean: VPS & Storage

☁️ HostiFi: Cloud UniFi Controllers

☁️ Vultr: VPS & Storage
===

[xXDeltaXxwhotookit]

Nice and straight forward - easy to follow along (and see where I was going wrong with other guides). Thanks

[mikescott]

Looking at this again, but ideally wanting port forwarding on the VPN provider.

[RoboNuggie]

I've never used a VPN, and I don't think I will, BUT if say some poor lost soul asks in the future I'll point them here for sure...
Thanks Sam, excellent as always....

[magaiconsultoriaemtimagai]

Hi friend, I have a question. Is it possible to carry out this configuration that you propose in the video on a pfsense that is already configured as a server? For example, consider my scenario: I have a pfsense on a network that works as a firewall and it is configured with the openvpn server, it already has users and certificates and accepts external connections so that my employees can access the company's local network from their homes . Is it possible to configure this same pfsense as you explain, without losing the server settings? I did it here and the users disappeared, thank God I had the exported backup xml file.

[piperfect]

You can also add multiple VPN interfaces and use a gateway group so incase one goes down it will still work.

[doublesnake]

Thanks, worked for me with Kaspersky vpn, now my xbox is connecting to other countries IP and the cloud gaming is working. To be honest I don't care about gaming but it's just a challenge and it's worked 😅

[try-that]

Very nicely done, concise and to the point. Are you going to do one for Wireguard? Plus howto use either openvpn or wireguard server on the actual router allowing users access to their network? I think it would be good for the pfsense playlist. I know there is tailscale etc, but I do like having a server on my router ofr access mainly to my camera's via Frigate.
Keep up the pfsense video's though, it's nice to see how other people think.

[SirKas]

Thanks for making this video. Well done 👍🏼. I like how you setup the wan to block traffic on a set IP that isn’t tagged… If I wanted to apply that rule to every IP on my network what modifications would I have to the firewall rule?

[AlonsoVPR]

Any idea on why even propperly configured my machine still connecting through my default LAN? I have checked everything like 10 times (spent all day doing this) but my connection still going through my ISP :/

[SyberPrepper]

Very helpful! You mentioned using a VM on Linode or Digital Ocean. I'm assuming you mean that either of these companies could be trusted with the history of your internet use as much as a VPN company? I'm hearing more and more that a lot of the VPN companies actually sell their traffic data to third parties, so I agree that we must be careful about trusting the VPN providers too much. Thanks for the video.

[umarfarid]

You can simply disable the lan rule to avoid direct interaction with wan, let me know what you say about it

[ronabelbalbadamanuel]

Can u give download link for the default configuration file 😊