Site-to-site OpenVPN: server LAN reachable from client LAN

[lucaset256]

Hi there,

I'm struggling with a site to site configuration which has been set as follows:

• Server OpenVPN (running on Ubuntu) (Switzerland)
• Client OpenVPN Pfsense (Italy)

The connection between those 2 is up and running

I can ping: the OVPN server and every single client on server side on LAN(192.168.1.0/1) from my pfSense diagnostic ping tool --> but only if pinging from WAN or OVPN INTERFACE

I can't ping any server-side clients where pinging from LAN, nor the OVPN server itself: 100% packet loss.

What am I doing wrong?

pfsense static route:

pfsense tunnel remote IP

pfsense ping from OVPN INTERFACE (leaving default the pinging source, I have successful ping as well)

pfsense ping from LAN

traceroute, this is interesting:

Pinging the server side router (192.168.1.1) from "Any" source, I get a new tunneling IP: 10.0.12.129 (?)

OVPN SERVER

any hints?

[Jarhead]

@lucaset256 Make the tunnel a /30 or /31.

[lucaset256]

@jarhead problem solved, I was missing some static routes on both the routers...

I opened a new topic here since I now have different issues with rules and interface.
Thank you