https://docs.netgate.com/pfsense/en/latest/vpn/openvpn/configuring-a-site-to-site-pki-ssl-openvpn-instance.html
https://docs.netgate.com/pfsense/en/latest/book/openvpn/site-to-site-example-configuration-ssl-tls.html
https://www.netgate.com/resources/videos/site-to-site-vpns-on-pfsense.html

And you need a Port Forward on OpenVPN Server side B on Mikrotik (OpenVPN server Port to pfSense).

-Rico

@viragomann said in Remote Client VPN can't traverse site-to-site VPN:

Additionally add the access servers tunnel network to the "Remote network/s" in the s2s settings on site2.

That was it. Whoops. Adding 192.168.3.0/24 to Site2's site-to-site "Remote Networks" did the trick. Feeling a tad silly that I missed that .. multiple times. Appreciate the help!

@WereCatf Hi! What did you do?

Hi zwierzu85 and joao.eduardo
Me too ! how are you resolved this problem ?? Please help me !?

I am having a very similar issue, I remeber not setting the link-mtu. Hope this works for me too.
--edit--
my issue was the internal service was blocking with its firewall rules.

@curtisgrice thanks again!

Hard to say. I am inclined to say no, but I'd have to know the specifics of how it was intended to be implemented.

In the vast majority of cases were looking at less than 10 using RDP or small file access. Occasionally some EMR software. I wouldn't expect more than 10-15mbps peak throughput.

system > routing. is that set correctly?

instead of using the default gateway. i have my default GW set to the tunnel i want it to go out of..

defaultgw.jpeg

For what it is worth, i changed the default gateway for IPV4 under System / Routing / Gateways and got internet on lan client.

Yeah its very possible.. But plex reports what IP to the plex servers as its public? You can not port forward in via your vpn service IP can you..

Hit your actual wan IP directly, or use custom fqdn for your plex that resolves to your wan public..

Or make sure your policy routing what you want out your vpn, and not the plex.

@johnpoz

Oke, I understand. So it's a coincidence that with AirVPN the outgoing IP is just 1 number difference.

Thanks for the explanation! ☺

What a mess!

You may have run the wizard multiple times without removing the former settings.

Is the client really connected?
The first 2 rules here belong to the WAN interface. Are there identicals? There won't come in any packet on OpenVPN interface for destination WAN address.

I'm having your box already from 2 months. Make two comments this time here at your forum. looks like this project is proper death community. Any of my comments was never answered.
Enjoy and thanks you for your no effort nothing