OpenVPN routing to other interface

patrick.pesegodinski

Hello.

I have an OpenVPN Site-to-Site connection, where one end has a VLAN.
The connection is stable and communicating without problems, but what I found strange is that the firewall is allowing access through the LAN to the other firewall, located at the other end of the tunnel, and LAN> VLAN communication is blocked.

viragomann

@patrick-pesegodinski
Any connection which the firewall rules on the respective interface allow can pass naturally.

So if you have an pass any-to-any rule on LAN, the LAN devices can access any. If this is not, what you want remove the pass rule or block unwanted destinations.

patrick.pesegodinski

@viragomann Okay, but in the firewall I am blocking communication from the LAN to the VLAN, but the LAN still communicates with the other side of the tunnel.

Configuring my IPs:

LAN Main firewall: 10.1.1.1/24
VLAN: 172.24.0.0/24

LAN client firewall: 10.0.0.1/24

IPv4 Tunnel Network: 192.168.210.0/30