Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    I can not reach VPN client side network from VPN server side network?

    Scheduled Pinned Locked Moved OpenVPN
    14 Posts 2 Posters 1.2k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • mucipM
      mucip @viragomann
      last edited by

      @viragomann
      Yes, only one client connecting. PfSense box from branch office to Pfsense box in head office.
      Do you advice me to change "IPv4 Tunnel Network"?

      Regards,
      Mucip:)

      V 1 Reply Last reply Reply Quote 0
      • V
        viragomann @mucip
        last edited by

        @mucip
        Yes, you should use a /30 tunnel network for this.

        mucipM 1 Reply Last reply Reply Quote 0
        • mucipM
          mucip @viragomann
          last edited by

          @viragomann
          Should I change it on both Pfsense boxes?

          Regards,
          Mucip:)

          V 1 Reply Last reply Reply Quote 0
          • V
            viragomann @mucip
            last edited by

            @mucip
            Stating a tunnel network is only needed on the server as far as I know.

            mucipM 2 Replies Last reply Reply Quote 0
            • mucipM
              mucip @viragomann
              last edited by

              Hi @viragomann,
              No. I can not ping to branch office IP from head office unfortunatelly.

              Regards,
              Mucip:)

              1 Reply Last reply Reply Quote 0
              • mucipM
                mucip @viragomann
                last edited by

                Hi @viragomann,
                We have Radio Link connection in the branch office.
                In the begining we were using mobile boxed internet and I can ping from head office to branch office. But lately we started to use Radio link internet. I think this problem is come from internette connection difference.
                I ralized this from below document.

                https://mitky.com/pfsense-openvpn-site-to-site-vpn/

                It's written like this in the document:
                It is assumed in this tutorial that the pfSense box running the OpenVPN server is getting a public (internet) IP address on its WAN interface. If the pfSense box is behind another routing device and using a local IP address from this device, this tutorial won’t work without port forwarding or placing the pfSense device in the upstream modem/router’s DMZ.

                How can I fix it?

                Regards,
                Mucip:)

                V 1 Reply Last reply Reply Quote 0
                • V
                  viragomann @mucip
                  last edited by

                  @mucip
                  I'm still waiting for answers to the questions in my very first post in this thread. No way to get a step beyond without this informations.

                  1 Reply Last reply Reply Quote 0
                  • mucipM
                    mucip @viragomann
                    last edited by

                    Dear @viragomann,

                    • I'm trying to ping LAN IP in branch office. Because I want to put Linux File Server in Branch office.
                    • Yes. OpenVPN server working in Head office and only one client using this server in branch office.
                    • I could not understand your 3rd question. Could you explain little bit mode please?

                    Regards,
                    Mucip:)

                    V 1 Reply Last reply Reply Quote 0
                    • V
                      viragomann @mucip
                      last edited by

                      @mucip said in I can not reach VPN client side network from VPN server side network?:

                      I'm trying to ping LAN IP in branch office. Because I want to put Linux File Server in Branch office.

                      Can you ping the VPN IP of the client?
                      Can you ping it's LAN IP?
                      I not, is it allowed in the firewall rules?

                      Yes. OpenVPN server working in Head office and only one client using this server in branch office.

                      Did you set a /30 tunnel now?
                      Is the VPN established (green at both sites)?

                      I could not understand your 3rd question. Could you explain little bit mode please?

                      Is this pfSense in the branch the default gateway in the branch LAN or is there an other router?

                      mucipM 1 Reply Last reply Reply Quote 0
                      • mucipM
                        mucip @viragomann
                        last edited by

                        Hi @viragomann,
                        Where can I see VPN IP? Because only PfSense client (Branch Office) connected to PfSence Server (Head Office).
                        No I can not ping LAN IP from Head office.

                        I can ping only Pfsense which is in the BranchOffice.

                        Yes I set it to /30

                        Yes both sides are green.

                        Regards,
                        Mucip:)

                        1 Reply Last reply Reply Quote 0
                        • First post
                          Last post
                        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.