VPN Client

Follow

Comments

52 comments

  • Avatar
    Ernesto Bonev Reynoso

    @Firewalla Team - Hey guys the wait is nearby the end as Wireguard will be part of Linux Kernel 5.6!
    Can you make it soon happen on Firewalla devices as a modern, more secure and light faster option as resides on kernel itself?!?!

    https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=bd2463ac7d7ec51d432f23bf0e893fb371a908cd

    Will be a great gift to all of us!

    0
    Comment actions Permalink
  • Avatar
    Paul Mokele

    Is Firewalla VPN server to Firewalla Client (3rd party VPN) possible...in short, can you direct all your traffic from the firewalla server to 3rd party VPN.

    0
    Comment actions Permalink
  • Avatar
    Joost Orij

    Did anyone manage to get this to work with VPN Unlimited? I managed to import the openVPN profile, but after filling the user and pass it won't connect.

    0
    Comment actions Permalink
  • Avatar
    Asiko

    NordVPN – Best VPN Service Provider | NordVPN Review

    https://mstwotoes.com/nordvpn-best-vpn-service-provider-nordvpn-review/

    -1
    Comment actions Permalink
  • Avatar
    Brent Warner

    Confirmed TorGuard is working. Issues importing the OVPN file, so cut and paste the code.

    1
    Comment actions Permalink
  • Avatar
    Firewalla

    @neil's solution also work for profiles generated by Mullvad VPN, which is simply leaving only one "remote xxx" entry in the .ovpn file

    0
    Comment actions Permalink
  • Avatar
    Simon Hardy-Francis

    A couple of questions:

    1. How is the compatibility with TorGuard [1]?

    2. How does Firewalla deal with failure concerning the 3rd party VPN? Does it automatically reconnect? Is all external traffic blocked until successfully reconnected to avoid leakage outside of the 3rd party VPN?

    3. Is there any monitoring regarding 3rd party VPN performance... in case you are paranoid about the performance of your 3rd party VPN provider :-)

    4. Is there anyway to have multiple concurrent VPNs? So e.g. traffic bound for the UK goes via the UK VPN, and traffic bound for country X goes via the X VPN?

    [1] https://torguard.net/

    0
    Comment actions Permalink
  • Avatar
    Support Team

    @Simon

     

    1. We have not tested the compatibility with TorGuard.

    2. There is a kill switch feature provided in Firewalla that you can choose to pause device traffic if VPN connection is broken and resume the traffic when the connection is auto recovered. This option can prevent leakage.

    3. We don't have performance test at this moment. 

    4. policy-based VPN routing will be supported on Gold.

    0
    Comment actions Permalink
  • Avatar
    Simon Hardy-Francis

    @Melvin, Thanks for the quick answers. Do you have a link to the kill switch feature? Probably useful for other people browsing this VPN section :-)

    0
    Comment actions Permalink
  • Avatar
    Simon Hardy-Francis

    Another question, currently I'm connecting to my 3rd party VPN via Linux running on my router. However, from time to time the system randomly gets unstable and I must manually reset. There is no feature to e.g. automatically reset every day, etc. Does Firewalla have such an automatic reset feature which can be used as a last ditch attempt to gain a better quality of service if all else fails?

    0
    Comment actions Permalink
  • Avatar
    Support Team

    @Simon

     

    Here it is:

    https://help.firewalla.com/hc/en-us/articles/360023379953-VPN-Client-Beta-#h_073b9487-d00c-4bf0-9aea-d80f8d537366

     

    Firewalla doesn't have the auto reset feature. Since you are techie, I guess you can just ssh and add a root cronjob to restart every night :)

    0
    Comment actions Permalink
  • Avatar
    Francesco Meani

    Hi have tried with TIGER VPN (https://www.tigervpn.com) and it looks like it works by using the standard configuration files and applying the following extra steps.

    TIGER VPN  (Requires additional configuration)

    (These steps should not be needed anymore, they are here in case you run into problems)

    1. find the line starting with "ca". In your profile, it is "ca ca.crt"

    2. Copy the content in ca.crt, which should come together with your profiles from TigerVPN web site
    3. Replace the line of "ca" in the profile with the following content:

    <ca>
       [Paste the content of ca.crt] here.
    </ca>

    Now it should work like a charm.

    0
    Comment actions Permalink
  • Avatar
    Johnhache

    After lots of effort I still cannot get the surfshark VPN to work properly.  Has anyone been able to actually get it working as described above?

    0
    Comment actions Permalink
  • Avatar
    Andy Boes

    Help needed on VPNSecure.

    I have a lifetime subscription on this VPN Service.

    I downloaded there ovpn serverfiles that looks like this :

    client
    proto udp
    dev tun
    remote lu1.isponeder.com 1282
    cipher AES-256-CBC
    verb 3
    mute 20
    keepalive 10 120
    comp-lzo
    float
    persist-key
    persist-tun
    resolv-retry infinite
    nobind
    auth-nocache
    remote-cert-tls server
    <ca>
    -----BEGIN CERTIFICATE-----

    -----END CERTIFICATE-----
    </ca>
    <key>

    -----BEGIN ENCRYPTED PRIVATE KEY-----

    -----END ENCRYPTED PRIVATE KEY-----
    </key>

    <cert>
    -----BEGIN CERTIFICATE-----

    -----END CERTIFICATE-----
    </cert>

    This doesn't work - no connection within 30 seconds.  No other error?

    Then i reached out to there support and they give me another file for routers :

    client
    proto udp
    dev tun
    remote lu1.isponeder.com 1282
    cipher AES-256-CBC
    verb 3
    mute 20
    keepalive 10 120
    comp-lzo
    float
    <ca>
    -----BEGIN CERTIFICATE-----

    -----END CERTIFICATE-----
    </ca>
    <key>
    -----BEGIN RSA PRIVATE KEY-----

    -----END RSA PRIVATE KEY-----
    </key>
    <cert>
    -----BEGIN CERTIFICATE-----

    -----END CERTIFICATE-----
    </cert>

     

    With this file is it the same problem - no connection within 30 seconds - no error given.

    Could somenone help me with this?

    What is the default filestructure that Firewalla needs to establish connection???

    0
    Comment actions Permalink
  • Avatar
    Anthony

    Can i setup multiple VPN profiles and assign different devices to each profile and most importantly have them both active at the same time? More specific example. I have host a, b, c and d. I would like to have hosts A and B assigned to VPN_Profile1 Express VPN and hosts C and D assigned to VPN_Profile2 Other 3rd party VPN.

    Thanks!

    0
    Comment actions Permalink
  • Avatar
    K

    Are you considering support Wireguard as VPN client? Wireguard performs much better when CPU don't have AES-NI. 

    0
    Comment actions Permalink
  • Avatar
    Firewalla

    The Gold has AES-NI;  The problem with OpenVPN is its single thread, while Wireguard can use multiple cores.  As for raw encryption, likely both are the same.   Wireguard VPN client will be there after Wireguard VPN server.

    0
    Comment actions Permalink
  • Avatar
    NicK Trader

    Is it possible to connect to a server that I have that is running openvpn with the gold?

    0
    Comment actions Permalink
  • Avatar
    Firewall Guy

    Hello, I am trying to configure iVPN on Gold to use the 3rd Party VPN function on the router.

    I need to upload some config file into the Firewalla App, no idea what this looks like or whats required.

    Has anyone managed to get this working for https://www.ivpn.net ?

    Any help really appreciated.

    Thanks, Donald

    0
    Comment actions Permalink
  • Avatar
    Firewalla

    https://www.reddit.com/r/firewalla/comments/mafkvl/cyberghost_vpn_compatible_with_some_additional/

    Just wanted to offer for the @firewalla team that you can successfully configure CyberGhost VPN, but it requires similar steps to IPVanish.

    Basically you modify the .opvn file and in place of the ca line you do the ca.crt enclosed by <ca> </ca>; then rinse and repeat for cert(client.crt) and key(client.key).

    Working great for me.

    0
    Comment actions Permalink
  • Avatar
    remotebloke

    Do we know when WireGuard client is due?

    0
    Comment actions Permalink
  • Avatar
    Bob

    Can confirm ProtonVPN works on Gold as client VPN. Just went with a country profile, UDP, and the IKEv2 username/password. Didn't change anything in ovpn file. Pretty seamless so far.

    0
    Comment actions Permalink

Please sign in to leave a comment.