{"id":1816,"date":"2023-03-01T16:00:00","date_gmt":"2023-03-01T16:00:00","guid":{"rendered":"https:\/\/www.thebigbluehouse.org\/site\/?p=1816"},"modified":"2023-02-28T12:00:24","modified_gmt":"2023-02-28T12:00:24","slug":"openvpn-fix-after-upgrading-to-pfsense-23-01","status":"publish","type":"post","link":"https:\/\/www.thebigbluehouse.org\/site\/openvpn-fix-after-upgrading-to-pfsense-23-01\/","title":{"rendered":"OpenVPN Fix after upgrading to pfSense 23.01"},"content":{"rendered":"\n

As with all systems it’s important to keep them up to date and this is especially true with firewalls even if they are just playing a part in a home lab. Recently, there was an upgrade available for pfSense which brought in a whole host of great new features in version 23.01<\/a>. These included upgrading the version of PHP, some fixes to OpenVPN and improving the captive portal and also upgrading the version of PFBlocker (by the way PFBlocker is a really good package and worth checking in more detail if you don’t already use it!).<\/p>\n\n\n\n

However, while Ne<\/a>tgate<\/a> (the company who maintain pfSense), usually do a great job of testing everything before it goes out the door, I did stumble across a bug with OpenVPN failing to start after the upgrade to 23.01. After reading through some forum posts<\/a> it would appear to only affect the SG-3100 and other ‘older’ Netgate devices. This did provide a little fun for me on a Sunday afternoon.<\/p>\n\n\n\n

I found the bug when I restarted the firewall and noticed that the OpenVPN service was failing to start. I did the usual things of manually restarting the service, waiting a few moments, but ultimately ended at going to check the logs and found the following error message;<\/p>\n\n\n

\n
\"Cannot
Cannot open TUN\/TAP dev \/dev\/tun1: No such file or directory (errno=2)<\/figcaption><\/figure>\n<\/div>\n\n\n
\n\n\n\n

OpenVPN TUN\/TAP dev Fix<\/h2>\n\n\n\n
    \n
  1. After validating that you are experiencing the same issue and you are running pfSense 23.01, click on Diagnostics from the top menu bar.<\/li>\n\n\n\n
  2. In the drop down menu, click on Command Prompt<\/li>\n\n\n\n
  3. You will then see the following screen. You will need to enter the following command in the “Execute Shell Command box”<\/li>\n<\/ol>\n\n\n\n

    kldxref \/boot\/kernel<\/p>\n\n\n\n

      \n
    1. Then click Execute<\/li>\n\n\n\n
    2. You should then be able to restart your OpenVPN service Services option under the Status drop down on the menu bar at the top of the screen.<\/li>\n<\/ol>\n\n\n
      \n
      \"Command<\/figure>\n<\/div>\n\n\n
      \n\n\n\n

      Important Takeaways<\/h2>\n\n\n\n

      Prior to any upgrade it is important to test it before putting it on a production environment so you are fully aware of the caveats that may come as part of the roll out. Testing in a lab is absolutely key, alongside a well thought through back out plan. Consider these two elements in particular before any production change. I would also suggest using tools such as Ansible<\/a> to automate changes and make them as predictable as possible.<\/p>\n\n\n\n

      Netgate have already accepted this bug<\/a> and implemented a fix<\/a> ready for the next release. <\/p>\n\n\n\n

      DISCLAIMER<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

      This article describes how to fix the pfSense Firewall 23.01 error Cannot open TUN\/TAP dev \/dev\/tun1: No such file or directory (errno=2)<\/p>\n","protected":false},"author":1,"featured_media":1813,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2},"jetpack_post_was_ever_published":false},"categories":[392,393,412],"tags":[430,425,417,431,429,410,416],"class_list":["post-1816","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-itandcomputing","category-networking","category-pfsense","tag-command","tag-failed","tag-firmware","tag-netgate","tag-openvpn","tag-pfsense","tag-update"],"jetpack_publicize_connections":[],"jetpack_featured_media_url":"https:\/\/i0.wp.com\/www.thebigbluehouse.org\/site\/wp-content\/uploads\/2023\/02\/FirewallUpgrade.jpeg?fit=1914%2C930&ssl=1","jetpack_shortlink":"https:\/\/wp.me\/p2jmMR-ti","jetpack_sharing_enabled":true,"jetpack-related-posts":[{"id":1480,"url":"https:\/\/www.thebigbluehouse.org\/site\/adding-dns-entries-in-pfsense\/","url_meta":{"origin":1816,"position":0},"title":"Adding DNS entries in PFSense","author":"Tom Davison","date":"20 October, 2022","format":false,"excerpt":"This guide isn't anything more complex than showing how I setup custom DNS entries within my lab environment using PFSense. I like to access certain services with a Fully Qualified Domain Name (FQDN). This is mostly to allow me to access those systems using a name rather than IP address\u2026","rel":"","context":"In "IT and Computing"","block_context":{"text":"IT and Computing","link":"https:\/\/www.thebigbluehouse.org\/site\/category\/itandcomputing\/"},"img":{"alt_text":"Laptop Padlock","src":"https:\/\/i0.wp.com\/www.thebigbluehouse.org\/site\/wp-content\/uploads\/2022\/10\/dns-sm.jpeg?fit=1200%2C621&ssl=1&resize=350%2C200","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/www.thebigbluehouse.org\/site\/wp-content\/uploads\/2022\/10\/dns-sm.jpeg?fit=1200%2C621&ssl=1&resize=350%2C200 1x, https:\/\/i0.wp.com\/www.thebigbluehouse.org\/site\/wp-content\/uploads\/2022\/10\/dns-sm.jpeg?fit=1200%2C621&ssl=1&resize=525%2C300 1.5x, https:\/\/i0.wp.com\/www.thebigbluehouse.org\/site\/wp-content\/uploads\/2022\/10\/dns-sm.jpeg?fit=1200%2C621&ssl=1&resize=700%2C400 2x, https:\/\/i0.wp.com\/www.thebigbluehouse.org\/site\/wp-content\/uploads\/2022\/10\/dns-sm.jpeg?fit=1200%2C621&ssl=1&resize=1050%2C600 3x"},"classes":[]},{"id":2092,"url":"https:\/\/www.thebigbluehouse.org\/site\/configuring-dhcp-option-43-on-pfsense-kea-dhcp-for-unifi-device-discovery\/","url_meta":{"origin":1816,"position":1},"title":"Configuring DHCP Option 43 on pfSense (KEA DHCP) for UniFi Device Discovery","author":"Tom Davison","date":"4 January, 2026","format":false,"excerpt":"When running UniFi access points without Layer-2 adoption, DHCP Option 43 allows your UniFi devices to automatically discover the UniFi Network Controller. With pfSense now using KEA DHCP by default, the configuration is slightly different from the legacy ISC DHCP approach. This guide walks through enabling Option 43 on pfSense\u2026","rel":"","context":"In "IT and Computing"","block_context":{"text":"IT and Computing","link":"https:\/\/www.thebigbluehouse.org\/site\/category\/itandcomputing\/"},"img":{"alt_text":"UniFi Switch Racked","src":"https:\/\/i0.wp.com\/www.thebigbluehouse.org\/site\/wp-content\/uploads\/2026\/01\/unifi-switch.jpeg?fit=1200%2C575&ssl=1&resize=350%2C200","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/www.thebigbluehouse.org\/site\/wp-content\/uploads\/2026\/01\/unifi-switch.jpeg?fit=1200%2C575&ssl=1&resize=350%2C200 1x, https:\/\/i0.wp.com\/www.thebigbluehouse.org\/site\/wp-content\/uploads\/2026\/01\/unifi-switch.jpeg?fit=1200%2C575&ssl=1&resize=525%2C300 1.5x, https:\/\/i0.wp.com\/www.thebigbluehouse.org\/site\/wp-content\/uploads\/2026\/01\/unifi-switch.jpeg?fit=1200%2C575&ssl=1&resize=700%2C400 2x, https:\/\/i0.wp.com\/www.thebigbluehouse.org\/site\/wp-content\/uploads\/2026\/01\/unifi-switch.jpeg?fit=1200%2C575&ssl=1&resize=1050%2C600 3x"},"classes":[]},{"id":1478,"url":"https:\/\/www.thebigbluehouse.org\/site\/configuring-pfsense-for-unifi-dhcp-discovery\/","url_meta":{"origin":1816,"position":2},"title":"Configuring PFSense for UniFi DHCP Discovery","author":"Tom Davison","date":"15 October, 2022","format":false,"excerpt":"There are several ways for getting your UniFi devices adopted by your UniFi Controller, when the software is running in a different subnet. This article will cover DHCP, DNS and SSH options, the pros and cons, and how I have DHCP setup with PFSence","rel":"","context":"In "IT and Computing"","block_context":{"text":"IT and Computing","link":"https:\/\/www.thebigbluehouse.org\/site\/category\/itandcomputing\/"},"img":{"alt_text":"UniFi Switches","src":"https:\/\/i0.wp.com\/www.thebigbluehouse.org\/site\/wp-content\/uploads\/2022\/10\/unifi-sm.jpeg?fit=1200%2C600&ssl=1&resize=350%2C200","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/www.thebigbluehouse.org\/site\/wp-content\/uploads\/2022\/10\/unifi-sm.jpeg?fit=1200%2C600&ssl=1&resize=350%2C200 1x, https:\/\/i0.wp.com\/www.thebigbluehouse.org\/site\/wp-content\/uploads\/2022\/10\/unifi-sm.jpeg?fit=1200%2C600&ssl=1&resize=525%2C300 1.5x, https:\/\/i0.wp.com\/www.thebigbluehouse.org\/site\/wp-content\/uploads\/2022\/10\/unifi-sm.jpeg?fit=1200%2C600&ssl=1&resize=700%2C400 2x, https:\/\/i0.wp.com\/www.thebigbluehouse.org\/site\/wp-content\/uploads\/2022\/10\/unifi-sm.jpeg?fit=1200%2C600&ssl=1&resize=1050%2C600 3x"},"classes":[]},{"id":1706,"url":"https:\/\/www.thebigbluehouse.org\/site\/creating-a-bootable-usb-from-an-iso-on-a-mac\/","url_meta":{"origin":1816,"position":3},"title":"Creating a Bootable USB from an ISO on a Mac","author":"Tom Davison","date":"27 December, 2022","format":false,"excerpt":"I get asked is how to easily make bootable images on USB drives from an ISO or img file on a Mac. Open sorce balenaEtcher makes it so easy.","rel":"","context":"In "IT and Computing"","block_context":{"text":"IT and Computing","link":"https:\/\/www.thebigbluehouse.org\/site\/category\/itandcomputing\/"},"img":{"alt_text":"Apple Mac Laptop with USB","src":"https:\/\/i0.wp.com\/www.thebigbluehouse.org\/site\/wp-content\/uploads\/2022\/12\/laptopUSB.jpeg?fit=1200%2C583&ssl=1&resize=350%2C200","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/www.thebigbluehouse.org\/site\/wp-content\/uploads\/2022\/12\/laptopUSB.jpeg?fit=1200%2C583&ssl=1&resize=350%2C200 1x, https:\/\/i0.wp.com\/www.thebigbluehouse.org\/site\/wp-content\/uploads\/2022\/12\/laptopUSB.jpeg?fit=1200%2C583&ssl=1&resize=525%2C300 1.5x, https:\/\/i0.wp.com\/www.thebigbluehouse.org\/site\/wp-content\/uploads\/2022\/12\/laptopUSB.jpeg?fit=1200%2C583&ssl=1&resize=700%2C400 2x, https:\/\/i0.wp.com\/www.thebigbluehouse.org\/site\/wp-content\/uploads\/2022\/12\/laptopUSB.jpeg?fit=1200%2C583&ssl=1&resize=1050%2C600 3x"},"classes":[]},{"id":1482,"url":"https:\/\/www.thebigbluehouse.org\/site\/upgrading-unifi-controller-synology-docker-containers\/","url_meta":{"origin":1816,"position":4},"title":"Upgrade A UniFi Controller Synology Docker Containers","author":"Tom Davison","date":"13 November, 2022","format":false,"excerpt":"This guide shows you how to upgrade a docker container on synology (specifically updating the UniFi Controller), while ensuring the new container 'takes' the network ports of the old container.","rel":"","context":"In "Docker"","block_context":{"text":"Docker","link":"https:\/\/www.thebigbluehouse.org\/site\/category\/itandcomputing\/docker\/"},"img":{"alt_text":"Ship In Dock","src":"https:\/\/i0.wp.com\/www.thebigbluehouse.org\/site\/wp-content\/uploads\/2022\/10\/docker-upgrade-sm.webp?fit=1200%2C581&ssl=1&resize=350%2C200","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/www.thebigbluehouse.org\/site\/wp-content\/uploads\/2022\/10\/docker-upgrade-sm.webp?fit=1200%2C581&ssl=1&resize=350%2C200 1x, https:\/\/i0.wp.com\/www.thebigbluehouse.org\/site\/wp-content\/uploads\/2022\/10\/docker-upgrade-sm.webp?fit=1200%2C581&ssl=1&resize=525%2C300 1.5x, https:\/\/i0.wp.com\/www.thebigbluehouse.org\/site\/wp-content\/uploads\/2022\/10\/docker-upgrade-sm.webp?fit=1200%2C581&ssl=1&resize=700%2C400 2x, https:\/\/i0.wp.com\/www.thebigbluehouse.org\/site\/wp-content\/uploads\/2022\/10\/docker-upgrade-sm.webp?fit=1200%2C581&ssl=1&resize=1050%2C600 3x"},"classes":[]},{"id":1745,"url":"https:\/\/www.thebigbluehouse.org\/site\/firmware-update-for-a-hp-aruba-officeconnect-switch\/","url_meta":{"origin":1816,"position":5},"title":"Firmware Update for a HP\/Aruba OfficeConnect Switch","author":"Tom Davison","date":"24 January, 2023","format":false,"excerpt":"This article instructs you how to upgrade the software\/firmware on an HP\/Aruba OfficeConnect Ethernet network switch.","rel":"","context":"In "IT and Computing"","block_context":{"text":"IT and Computing","link":"https:\/\/www.thebigbluehouse.org\/site\/category\/itandcomputing\/"},"img":{"alt_text":"Network Switch Firmware Upgrade Header","src":"https:\/\/i0.wp.com\/www.thebigbluehouse.org\/site\/wp-content\/uploads\/2023\/01\/network-switch-firmware-upgrade.webp?fit=1200%2C571&ssl=1&resize=350%2C200","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/www.thebigbluehouse.org\/site\/wp-content\/uploads\/2023\/01\/network-switch-firmware-upgrade.webp?fit=1200%2C571&ssl=1&resize=350%2C200 1x, https:\/\/i0.wp.com\/www.thebigbluehouse.org\/site\/wp-content\/uploads\/2023\/01\/network-switch-firmware-upgrade.webp?fit=1200%2C571&ssl=1&resize=525%2C300 1.5x, https:\/\/i0.wp.com\/www.thebigbluehouse.org\/site\/wp-content\/uploads\/2023\/01\/network-switch-firmware-upgrade.webp?fit=1200%2C571&ssl=1&resize=700%2C400 2x, https:\/\/i0.wp.com\/www.thebigbluehouse.org\/site\/wp-content\/uploads\/2023\/01\/network-switch-firmware-upgrade.webp?fit=1200%2C571&ssl=1&resize=1050%2C600 3x"},"classes":[]}],"_links":{"self":[{"href":"https:\/\/www.thebigbluehouse.org\/site\/wp-json\/wp\/v2\/posts\/1816","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.thebigbluehouse.org\/site\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.thebigbluehouse.org\/site\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.thebigbluehouse.org\/site\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.thebigbluehouse.org\/site\/wp-json\/wp\/v2\/comments?post=1816"}],"version-history":[{"count":5,"href":"https:\/\/www.thebigbluehouse.org\/site\/wp-json\/wp\/v2\/posts\/1816\/revisions"}],"predecessor-version":[{"id":1821,"href":"https:\/\/www.thebigbluehouse.org\/site\/wp-json\/wp\/v2\/posts\/1816\/revisions\/1821"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.thebigbluehouse.org\/site\/wp-json\/wp\/v2\/media\/1813"}],"wp:attachment":[{"href":"https:\/\/www.thebigbluehouse.org\/site\/wp-json\/wp\/v2\/media?parent=1816"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.thebigbluehouse.org\/site\/wp-json\/wp\/v2\/categories?post=1816"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.thebigbluehouse.org\/site\/wp-json\/wp\/v2\/tags?post=1816"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}