PureVPN isn't that great, it let this here to help you configure OpenVPN.
If you wish to use your own VPS to do a VPN, here is a new guide: https://wiki.abyssproject.net/en/starlink/port-opening-behind-starlink-wireguard
The goal of this guide is to be able to open an inbound port on a Starlink connection by using an external VPN like PureVPN here.
We will use PureVPN, but we don't have any affiliation with them.
You must have the subscription with the Port Forwarding add-on:https://www.purevpn.com/port-forwarding
You also need a firewall like OPNSense behind your Starlink connection that already act as a firewall and then, will allow us to manage the ports we need.
Example of OPNSense configuration with Starlink: https://wiki.abyssproject.net/en/starlink/connecting-starlink-opnsense
Open your subscription at PureVPN and configure the Port forwarding add-on like this: https://my.purevpn.com/v2/dashboard/subscriptions
Enable all ports, it only suitable is you have a firewall like us behind, if you don't have any firewall don't do this:
Download latest configuration files from here (Others routers): https://support.purevpn.com/openvpn-files.
Go to System -> Trust -> Authorities and click on +:
Import the authority certificate from the archive (The content of ca2.crt file):
Go to VPN -> OpenVPN -> Clients and click on +:
Your VPN username and password are available at the bottom of this page: https://my.purevpn.com/v2/dashboard/subscriptions
You can also grab the server address and port in the VPN configuration file you want to use, like fr2-ovpn-udp.ovpn:
Now, complete all the important information like this, you will need the content of wdc.key file for the TLS Shared Key :
Go to VPN -> OpenVPN -> Connection Status and check that the connection is UP:
Go to Intefaces -> Assignments and assign the OpenVPN client virtual interface to OPT1 (or the first available one) :
Configure only the description and enable the interface:
Go to Firewall -> Aliases and create the Alias containing all the hosts that should go on internet using the new VPN:
Now, go to Firewall -> LAN and create the two following rules:
Go to Firewall -> Outbound and enable Hybrid outbound NAT rule generation.
Next, create those 3 rules (on the PureVPN interface) so the outside traffic is functional:
First, do your port forward by going to Firewall -> NAT -> Port Forward.
You should use PureVPN interface and not WAN like this:
Now, create your inbound firewall rules from Firewall -> Rules -> PureVPN like this, so the port forward is allowed:
Then, you will be able to check that your port is well open with tools like this https://www.yougetsignal.com/tools/open-ports/ :