Feature request

[joeschmit2001]

I would like to see the feature be added to next release:
I use Pfsense as my OpenVpn service, I would like to move to to your project for offloading VPN service.
The feature that stop me from moving to your product is this:
I use both Certificate and Username for login.
1.I setup CA server
2.I created User with Cert and User/Password access
3.I created Openvpn tunnell
4.I connect to VPN server then login with Cert and and User/Password

Can you please add this feature

[thisjun]

What feature do you want exactly?

[joeschmit2001]

please look at this link:

https://vorkbaard.nl/set-up-openvpn-on- ... ry-radius/

[thisjun]

I red the page.
That makes no sense.
What specific problem did you encounter?

[joeschmit2001]

Here is how Pfsense works to day for me with Openvpn:
1. I generate a Certificate / Key pair for the server
2. I generate a Certificate / Key pair for the user say "john"
3. Build a user "john" with a password
4. Ty the Cert to that user in user manager
5. Build a Openvpn server say at port 1194
6. Ty Certificate / Key to that server during setup.
7. Open ports on firewall during setup
8. Generate Openvpn file with addon package that contains install files.
9. Test connection via Openvpn manager to desired site
10. Enter User name / Password
11. Wait for connect and use.
Bottom line you have to have Certificate / Key pair and User Name / Password for User of "John" to get access of any kind.
I would like to take the load off the Pfsense firewall and place on separate server.

[thisjun]

I think it may be possible.

[joeschmit2001]

Have you download the product above Pfsense to see how would work?
I can help you with config file to see how would work..
You just need to setup Virtural-Box Image and I can provide you a running know good config.

[qupfer]

And again, what is the "feature" you want?
Combined Cert and password authentication??

I would simply set a passphrases for the cert. So, only entering the username is missing.

[joeschmit2001]

Sorry about the late reply , The present way I use it is the client is a router "Linksys3200" "OpenVpn"connected to Pfsense server in the states. It uses Password , Username and Cert to authenticate.
I connect to internal network and state side internet.
I trying to move off pfsense as a VPN server.
I would like to add IPSEC and OpenVpn at the same time same server.