[SOLVED]Openvpn connects but no local lan access

source · Jan 7, 2013, 3:24 PM

Im running mac osx mountain lion , ill draw up the info, shortly

THank you,

source · Jan 7, 2013, 5:20 PM

Network layout , openvpn screenshots , and firewall rules.

Hope this helps, thank you.

![demo openvpn layout.png](/public/imported_attachments/1/demo openvpn layout.png)
![demo openvpn layout.png_thumb](/public/imported_attachments/1/demo openvpn layout.png_thumb)
![Screen Shot 2013-01-07 at 11.15.14 AM.png](/public/imported_attachments/1/Screen Shot 2013-01-07 at 11.15.14 AM.png)
![Screen Shot 2013-01-07 at 11.15.14 AM.png_thumb](/public/imported_attachments/1/Screen Shot 2013-01-07 at 11.15.14 AM.png_thumb)
![Screen Shot 2013-01-07 at 11.14.41 AM.png](/public/imported_attachments/1/Screen Shot 2013-01-07 at 11.14.41 AM.png)
![Screen Shot 2013-01-07 at 11.14.41 AM.png_thumb](/public/imported_attachments/1/Screen Shot 2013-01-07 at 11.14.41 AM.png_thumb)
![Screen Shot 2013-01-07 at 11.14.27 AM.png](/public/imported_attachments/1/Screen Shot 2013-01-07 at 11.14.27 AM.png)
![Screen Shot 2013-01-07 at 11.14.27 AM.png_thumb](/public/imported_attachments/1/Screen Shot 2013-01-07 at 11.14.27 AM.png_thumb)
![Screen Shot 2013-01-07 at 11.24.53 AM.png](/public/imported_attachments/1/Screen Shot 2013-01-07 at 11.24.53 AM.png)
![Screen Shot 2013-01-07 at 11.24.53 AM.png_thumb](/public/imported_attachments/1/Screen Shot 2013-01-07 at 11.24.53 AM.png_thumb)

tattoomees · Jan 7, 2013, 5:24 PM

on Advanced add route 172.16.0.0 and your mask etc 255.255.0.0

source · Jan 7, 2013, 5:28 PM

I've done that but it doesnt help. I will try it again. Also, i thought that me specifying it in the network portion would do that.

source · Jan 7, 2013, 5:57 PM

i added push "route 172.16.0.0 255.255.0.0"; per the example. and still no go. It connects great thought… I'm digging the ldap backend authentication.

below you'll see the network is there, but strangely its says 172.16 and not 172.16.0.0, not sure if that matters. The viscosity VPN client for mac showing succesfull connection. Like i said, I authenticate fine, connect fine, and can get as far as the pfsense lan interface, but beyond that, no.

![Screen Shot 2013-01-07 at 11.57.15 AM.png](/public/imported_attachments/1/Screen Shot 2013-01-07 at 11.57.15 AM.png)
![Screen Shot 2013-01-07 at 11.57.15 AM.png_thumb](/public/imported_attachments/1/Screen Shot 2013-01-07 at 11.57.15 AM.png_thumb)

jimp · Jan 8, 2013, 4:02 PM

Is the pfSense firewall to which you connect the default gateway for the lan you're trying to reach?

source · Jan 8, 2013, 6:55 PM

dang. thats the problem. Since I've set this up as a demo, to test out pfsense. I have not yet configured it as a gateway. I setup the pfsense as my gw on a local machine and it works, it responds.

Thanks for helping me solve this. I think next would be to setup a route to the 10.0.8.0/24 network on the router. That should resolve the ping back issue.

jimp · Jan 8, 2013, 7:04 PM

Yep, either put the route in the actual gateway, or you can do some outbound NAT on the LAN to make the VPN client traffic appear to originate from the firewall so it would look "local" and thus not requite and special routing. Only downside is that you lose the original client IP in the process, as seen by the target machine. (and it would probably break SMB access)

source · Jan 8, 2013, 7:07 PM

I there a way to configure pfsense to act as just a vpn appliance, where i don't have to add routing to another device or change the gateway on the local machines?

jimp · Jan 8, 2013, 7:09 PM

Only by adding the NAT I mentioned. Otherwise you need routes somewhere.

(Or an ugly tap bridge VPN that drops clients into the LAN subnet with LAN IPs…)

source · Jan 8, 2013, 7:20 PM

Thanks again, you are my hero!