{"id":19625,"date":"2020-02-27T12:06:08","date_gmt":"2020-02-27T12:06:08","guid":{"rendered":"https:\/\/www.firewallhardware.it\/pfsense-configurazione-openvpn-su-apple-iphone-tablet-e-ios\/"},"modified":"2020-03-30T15:33:31","modified_gmt":"2020-03-30T15:33:31","slug":"pfsense-configurazione-openvpn-su-apple-iphone-tablet-e-ios","status":"publish","type":"post","link":"https:\/\/blog.miniserver.it\/en\/openvpn\/pfsense-configurazione-openvpn-su-apple-iphone-tablet-e-ios\/","title":{"rendered":"pfSense: OpenVpn configuration on Apple iPhone, Tablet and iOS"},"content":{"rendered":"<p>[vc_row css=&#8221;.vc_custom_1567441651052{margin-top: 30px !important;}&#8221;]<\/p>\n<h3 style=\"color: #00a0df; font-size: 20px; text-align: left;\">Purpose of this guide<\/h3>\n<p>[vc_separator css=&#8221;.vc_custom_1567441743182{margin-top: -20px !important;}&#8221;]The aim of this guide is to show how to configure our Apple device running iOS with <strong>OpenVpn<\/strong> on a <strong>pfSense<\/strong> firewall using the free <strong>OpenVPN<\/strong> Client App.<\/p>\n<p>The configuration is really simple and is now stable and super tested for years. In particular, installation on iOS is particularly simple, even for non-professionals.<\/p>\n<p>This guide can also be applied to <strong>OPNsense<\/strong> without particular changes.JTVCYWRyb3RhdGUlMjBiYW5uZXIlM0QlMjIzJTIyJTVE<\/p>\n<h3 style=\"color: #00a0df; font-size: 20px; text-align: left;\">Software prerequisites:<\/h3>\n<p>[vc_separator css=&#8221;.vc_custom_1567441743182{margin-top: -20px !important;}&#8221;]Applicable from pfSense 2.3 onwards.<\/p>\n<p>This guide is made with pfSense 2.4.4.<\/p>\n<p>The OpenVPN server must be already configured and functional, as shown and illustrated in the guide: <a href=\"https:\/\/blog.miniserver.it\/en\/firewall\/create-a-road-warrior-vpn-client-to-gateway-with-pfsense-and-openvpn\/\" target=\"_blank\" rel=\"noopener noreferrer\">https:\/\/blog.miniserver.it\/en\/create-a-road-warrior-vpn-client-to-gateway-with-pfsense-and-openvpn\/<\/a><\/p>\n<h3 style=\"color: #00a0df; font-size: 20px; text-align: left;\">Used Hardware<\/h3>\n<p>[vc_separator css=&#8221;.vc_custom_1567441743182{margin-top: -20px !important;}&#8221;]To create this guide we used an <strong>A1 Server<\/strong> (<a href=\"https:\/\/blog.miniserver.it\/en\/a1-server\/\" target=\"_blank\" rel=\"noopener noreferrer\">https:\/\/blog.miniserver.it\/a1-server\/<\/a>) but it can also work with the cheapest firewalls starting from the famous <strong>APU2 NIC<\/strong> (<a href=\"https:\/\/blog.miniserver.it\/en\/apu2-2nic\/\" target=\"_blank\" rel=\"noopener noreferrer\">https:\/\/blog.miniserver.it \/ apu2-2nic \/<\/a>).<\/p>\n<p>As an <strong>Apple<\/strong> device, we used an <strong>iPhone 6<\/strong>. Intentionally not one of the latest models to show that compatibility is also extended to older models.<\/p>\n<p>Installation of <strong>OpenVPN<\/strong> on <strong>iOS<\/strong>:<\/p>\n<p>First we go to the App Store and download the <strong><em>OpenVpn<\/em><\/strong> Client (<a href=\"https:\/\/itunes.apple.com\/us\/app\/openvpn-connect\/id590379981\" target=\"_blank\" rel=\"noopener noreferrer\">https:\/\/itunes.apple.com\/us\/app\/openvpn-connect\/id590379981<\/a>) and install the app on our Apple Device.[vc_single_image image=&#8221;19608&#8243; img_size=&#8221;full&#8221; onclick=&#8221;link_image&#8221;]Once the installation is complete, the application should appear as shown in the figure below:[vc_single_image image=&#8221;19610&#8243; img_size=&#8221;full&#8221; onclick=&#8221;link_image&#8221;]At this point we create a user and the relative certificate as shown in our guide: <a href=\"https:\/\/blog.miniserver.it\/en\/firewall\/create-a-road-warrior-vpn-client-to-gateway-with-pfsense-and-openvpn\/\" target=\"_blank\" rel=\"noopener noreferrer\">https:\/\/blog.miniserver.it\/en\/create-a-road-warrior-vpn-client-to-gateway-with-pfsense-and-openvpn\/<\/a><\/p>\n<p>Let&#8217;s go to our <strong>pfSense<\/strong> and look for the menu: VPN &#8211; <strong>OpenVPN<\/strong> &#8211; Client Export.<\/p>\n<p>Let&#8217;s scroll down the page:[vc_single_image image=&#8221;19567&#8243; img_size=&#8221;full&#8221; onclick=&#8221;link_image&#8221;]We download the <strong>OpenVPN Connect package (iOS \/ Android)<\/strong> see red dot in the figure.<\/p>\n<p>The downloaded package will contain a single file.<\/p>\n<p>At this point we just have to send the package you just downloaded to an email address configured on the <strong>Apple iOS<\/strong> device.<\/p>\n<p>Let&#8217;s go to our <strong>MAC device<\/strong>, open the mail and we will see that the file will be displayed with the OpenVPN icon as shown in the figure:[vc_single_image image=&#8221;19612&#8243; img_size=&#8221;full&#8221; onclick=&#8221;link_image&#8221;]We select the file attached with the <strong>OpenVPN<\/strong> icon.[vc_single_image image=&#8221;19571&#8243; img_size=&#8221;337&#215;426&#8243; onclick=&#8221;link_image&#8221;]If the <strong>OpenVPN<\/strong> App is correctly installed on our <strong>Apple<\/strong> device we will see the <strong>Copy to OpenVPN<\/strong> choices.<\/p>\n<p>We then select <strong>Copy to OpenVPN<\/strong>. The App should therefore import the certificate into it. The result should be:[vc_single_image image=&#8221;19615&#8243; img_size=&#8221;full&#8221; onclick=&#8221;link_image&#8221;]At the bottom left we select <strong>ADD<\/strong> to import the certificate on our <strong>Apple device<\/strong>.[vc_single_image image=&#8221;19617&#8243; img_size=&#8221;337&#215;355&#8243; onclick=&#8221;link_image&#8221;]We complete the username field with the username set on the certificate downloaded from <strong>pfSense<\/strong>, in this case <strong>test1<\/strong> and we put the password here also previously set on <strong>pfsense<\/strong>.<\/p>\n<p><strong><em>Note: the password set on pfSense means the one entered in the menu: System &#8211; User Manager &#8211; Users.<\/em><\/strong>[vc_single_image image=&#8221;19577&#8243; img_size=&#8221;337&#215;224&#8243; onclick=&#8221;link_image&#8221;]We answer Allow to the question.<\/p>\n<p>We finished! Now our <strong>Apple iPhone<\/strong> or <strong>Tablet<\/strong> is ready to test the <strong>VPN connection<\/strong>.[vc_single_image image=&#8221;19619&#8243; img_size=&#8221;337&#215;254&#8243; onclick=&#8221;link_image&#8221;]As shown in the figure below, let&#8217;s try to activate the VPN connection:[vc_single_image image=&#8221;19622&#8243; img_size=&#8221;337&#215;600&#8243; onclick=&#8221;link_image&#8221;]In case of errors, it will be possible to consult the activity log by pressing the icon at the top right next to the word Profiles.<\/p>\n<p>Remember that this guide can also be used to connect <strong>OPNsense<\/strong> devices using the same <strong>OpenVPN<\/strong> Client application and the same configurations.<\/p>\n<p>In case of problems in the connection it is probable that the problem lies in the configuration of the pfSense, that is server side. The advice is to consult the following guide: <a href=\"https:\/\/blog.miniserver.it\/en\/firewall\/create-a-road-warrior-vpn-client-to-gateway-with-pfsense-and-openvpn\/\" target=\"_blank\" rel=\"noopener noreferrer\">https:\/\/blog.miniserver.it\/en\/create-a-road-warrior-vpn-client-to-gateway-with-pfsense-and-openvpn\/<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>The aim of this guide is to show how to configure our Apple device running iOS with OpenVpn on a pfSense firewall using the free OpenVPN Client App<\/p>\n","protected":false},"author":11,"featured_media":25159,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"content-type":"","footnotes":""},"categories":[373],"tags":[138],"class_list":["post-19625","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-openvpn","tag-pfsense-en"],"_links":{"self":[{"href":"https:\/\/blog.miniserver.it\/en\/wp-json\/wp\/v2\/posts\/19625","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.miniserver.it\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.miniserver.it\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.miniserver.it\/en\/wp-json\/wp\/v2\/users\/11"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.miniserver.it\/en\/wp-json\/wp\/v2\/comments?post=19625"}],"version-history":[{"count":7,"href":"https:\/\/blog.miniserver.it\/en\/wp-json\/wp\/v2\/posts\/19625\/revisions"}],"predecessor-version":[{"id":19717,"href":"https:\/\/blog.miniserver.it\/en\/wp-json\/wp\/v2\/posts\/19625\/revisions\/19717"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/blog.miniserver.it\/en\/wp-json\/wp\/v2\/media\/25159"}],"wp:attachment":[{"href":"https:\/\/blog.miniserver.it\/en\/wp-json\/wp\/v2\/media?parent=19625"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.miniserver.it\/en\/wp-json\/wp\/v2\/categories?post=19625"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.miniserver.it\/en\/wp-json\/wp\/v2\/tags?post=19625"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}