How can we help?

VyprVPN OpenVPN Setup for OpnSense/pfSense

  • Updated

Please note: We offer limited support for this configuration due to many variables that can cause connection or performance issues. We cannot guarantee VyprVPN's performance or functionality on your router.

Use the instructions below to configure an OpenVPN connection on your OpnSense or pfSense router:

  1. Download the VyprVPN Certificate

  2. System --> Trust --> Authorities --> Import VyprVPN CA Cert (copy & paste it in from a text editor), name it VyprVPN

  3. VPN --> OpenVPN --> Clients --> Add (with following settings)

  4. Server Mode: Peer to Peer (SSL/TLS)

  5. Protocol: UDP

  6. Device Mode: tun

  7. Interface: WAN

  8. Local port: (blank/empty)

  9. Server host or address: use the server address of your preferred location found here

  10. Server port: 443

  11. Proxy host or address: (blank/empty)

  12. Proxy port: (blank/empty)

  13. Proxy authentication extra options: none

  14. Server host name resolution: (unchecked)

  15. Description: VyprVPN

  16. User name/pass: Username: (your email address)

  17. Password: (your password)

  18. Cryptographic Settings

  19. TLS Authentication: (unchecked)

  20. Peer Certificate Authority: VyprVPN (see above, Import CA)

  21. Client Certificate: None (Username and Password Required)
    Encryption algorithm: AES-266-CBC (256 bit key, 128 bit block)
    Auth Digest Algorithm: SHA256 (256-bit)
    Hardware Crypt: (use it if you have it, e.g. Intel RDRAND engine - RAND)

  22. Tunnel Settings (all blank or unchecked except)

  23. Compression: Enable with Adaptive Compression

  24. Advanced (add these to advanced, replace "server.address" with the server address used in step 9):
    resolv-retry infinite keepalive 10 60 persist-key persist-tun persist-remote-ip verify-x509-name server.address name verb 3 tls-cipher TLS-DHE-RSA-WITH-AES-256-CBC-SHA redirect-gateway autolocal

(Check the logs to validate the server address above to match the certificate and server you are connecting to)

  1. Verbosity Level: 3 (Recommended)

Start your client and look at the logs. You should get a successful startup, but you are not done yet:

openvpn[49494]: Initialization Sequence Completed

  1. Firewall --> NAT --> Outbound --> Set to Hybrid

  2. Add a manual rule

  3. Interface: OpenVPN, leave the rest as defaults and save

  4. Check our IP address checker page to verify that you are successfully connected.

If you need any further assistance, please contact our 24/7 Customer Success Team, who would be glad to assist.

Related articles