Truenas core and VPN

I use EspressVPN and I know it’s a known issue that truenas will not connect even though split tunneling is enabled. Is there a decent VPN that will work with truenas or a workaround for this? If ExpressVPN is installed on the router instead of the PCs will that work?

Usually “split-tunneling” refers to application overrides, in regards to desktop VPN software.

You need to look for and enable a feature called something to the effect of “local bypass” or “LAN override” or “allow private network connections”.

2 Likes

VPN modifications are pretty sparse with ExpressVPN. It is supposed to “Allow access to devices on the local network (such as printers or file servers)”. I have to assume it does not see the NAS on the local network. I also know many others have the same issue.

Are you connecting to the NAS via an IP address or a hostname?

A fixed IP address.

I don’t use ExpressVPN, but it looks like there’s an option exactly for that.

You’re saying even with this feature enabled, it still does not let you access the local network? If so, it’s something that needs to be taken up with ExpressVPN.

That is correct.
ExpressVPN - Options

I would contact ExpressVPN.

It may even be a combination of ExpressVPN + Windows Firewall.

I’ve used three different VPN desktop applications, and they all allowed local network access.

I worked with ExpressVPN for quite a while but they could not resolve the issue. They suggested I install something (I don’t recall what it was) but it needed a certificate. Can you tell me what VPN brands you have used that work with Truenas? I use Bitdefender firewall.

You might want to check this as well. Something’s blocking local network access when you activate the VPN connection with ExpressVPN.


Nothing needs to “work with TrueNAS”. You just need local network access when using a VPN connection.

I’ve used Mullvad, Proton, and Eddie.

All other network access is working, it’s just Truenas that’s affected.

Can you ping the TrueNAS server’s IP address from a command prompt?

Yes, I can ping the NAS but not connect when the VPN is active.

Then what do you mean by “connect”?

Connect to the web UI? To a particular SMB share? To any SMB share?

If you can ping the server, then by all means, it’s reachable.

Shares disappear from Windows explorer, I can not connect to the Truenas console, and backups don’t work. Basically I might as well have cut the cables. But I can ping the IP.

So to review.

If you have ExpressVPN active on your desktop PC, with the “Allow local network” option enabled:

  • You can connect to other local network devices
  • You can ping the TrueNAS server’s IP address
  • You cannot access TrueNAS SMB shares (via IP address?)
  • You cannot connect to the TrueNAS web UI (via IP address?)

If you disable the ExpressVPN connection:

  • Everything works, including access to SMB shares and the TrueNAS web UI

Is this correct?

Yes, that is correct.

ExpressVPN’s customer support couldn’t even figure it out?

Not sure what else to try. Something’s not making sense.

1 Like

Connecting via http or https to web ui?

I changed VPNs from ExpressVPN to Surfshark. Surfshark works better and is more configurable but I still have issues even when the VPN is configured to ignore Acronis backup and even the fixed IP for the NAS. The backups works until the end and then fails to close the file and hangs. With Surfshark active I can connect to the NAS console but not the NAs shares. I guess I’m stuck.