Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Configuring VPN win7 clients with pfsense

    Scheduled Pinned Locked Moved OpenVPN
    61 Posts 5 Posters 19.4k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • L
      LeCygne
      last edited by

      But why i can't ping any windows machine ? (only linux machine)

      1 Reply Last reply Reply Quote 0
      • L
        LeCygne
        last edited by

        Also i can't ping my printers , only linux machines .

        1 Reply Last reply Reply Quote 0
        • johnpozJ
          johnpoz LAYER 8 Global Moderator
          last edited by

          Do you printers have a gateway set?  Most likely not would be my bet.  The windows 7 firewall by default blocks ping would be my bet as well.  Kind of hard to answer a ping that is from a different network without a gateway.

          If you can ping 1 box on your network, then clearly your vpn is up.  What settings to you have on your windows firewall.  Can you ping your windows 7 boxes from other machine on the local network?  If so check that their firewalls allow ping from networks other than the local one.

          An intelligent man is sometimes forced to be drunk to spend time with his fools
          If you get confused: Listen to the Music Play
          Please don't Chat/PM me for help, unless mod related
          SG-4860 24.11 | Lab VMs 2.8, 24.11

          1 Reply Last reply Reply Quote 0
          • L
            LeCygne
            last edited by

            @johnpoz:

            Do you printers have a gateway set?  Most likely not would be my bet.  The windows 7 firewall by default blocks ping would be my bet as well.  Kind of hard to answer a ping that is from a different network without a gateway.

            If you can ping 1 box on your network, then clearly your vpn is up.  What settings to you have on your windows firewall.  Can you ping your windows 7 boxes from other machine on the local network?  If so check that their firewalls allow ping from networks other than the local one.

            Look my machines firewall is disable but there is a kaspersky program.

            Yes i can ping windows machines from other .

            1 Reply Last reply Reply Quote 0
            • johnpozJ
              johnpoz LAYER 8 Global Moderator
              last edited by

              Well check it for firewall – what part do you not understand that your tunnel is up.. Why would pfsense allow traffic from linux boxes but not windows boxes?

              So if you can ping 1 box inside your network, and others don't respond - then its something on those machines.

              An intelligent man is sometimes forced to be drunk to spend time with his fools
              If you get confused: Listen to the Music Play
              Please don't Chat/PM me for help, unless mod related
              SG-4860 24.11 | Lab VMs 2.8, 24.11

              1 Reply Last reply Reply Quote 0
              • L
                LeCygne
                last edited by

                @johnpoz:

                Well check it for firewall – what part do you not understand that your tunnel is up.. Why would pfsense allow traffic from linux boxes but not windows boxes?

                So if you can ping 1 box inside your network, and others don't respond - then its something on those machines.

                Yes i know my vpn is up , but how can i solve that problem with windows machines ?

                until now nothing happened with windows machines

                Also i disabled windows's firewall  , but also no luck .

                1 Reply Last reply Reply Quote 0
                • johnpozJ
                  johnpoz LAYER 8 Global Moderator
                  last edited by

                  Set their firewalls to allow whatever traffic you want to use from your tunnel network.

                  Disable whatever firewall your running on those boxes.

                  An intelligent man is sometimes forced to be drunk to spend time with his fools
                  If you get confused: Listen to the Music Play
                  Please don't Chat/PM me for help, unless mod related
                  SG-4860 24.11 | Lab VMs 2.8, 24.11

                  1 Reply Last reply Reply Quote 0
                  • L
                    LeCygne
                    last edited by

                    @johnpoz:

                    Set their firewalls to allow whatever traffic you want to use from your tunnel network.

                    Disable whatever firewall your running on those boxes.

                    i will remove kaspersky…is that helpful ?

                    1 Reply Last reply Reply Quote 0
                    • johnpozJ
                      johnpoz LAYER 8 Global Moderator
                      last edited by

                      I don't know - is it, is that is what is firewalling your traffic?

                      I am not sure why the thread is still open?  You have verified your tunnel is working..  So now your issue is with clients, that has nothing to do with pfsense.

                      An intelligent man is sometimes forced to be drunk to spend time with his fools
                      If you get confused: Listen to the Music Play
                      Please don't Chat/PM me for help, unless mod related
                      SG-4860 24.11 | Lab VMs 2.8, 24.11

                      1 Reply Last reply Reply Quote 0
                      • L
                        LeCygne
                        last edited by

                        @johnpoz:

                        I don't know - is it, is that is what is firewalling your traffic?

                        I am not sure why the thread is still open?  You have verified your tunnel is working..  So now your issue is with clients, that has nothing to do with pfsense.

                        Look man this is the last step of my story…don't tell me to close this thread right ?i'm still looking for a solution for my problem your solution is not complete...

                        thank you .

                        1 Reply Last reply Reply Quote 0
                        • johnpozJ
                          johnpoz LAYER 8 Global Moderator
                          last edited by

                          I can not help you without info!!  Did you uninstall your firewall software on the client?  Did you configure said software to allow for the traffic you want to allow icmp, file sharing from IPs other than your local network?

                          Do these clients use pfsense as their gateway?

                          You clearly have a working vpn tunnel if you can access linux boxes behind your pfsense..  So my point is this is no longer a VPN issue but a client configuration issue..  This board is more for helping users with pfsense related issues - your issue is client related.

                          While I don't mind helping you, not much I can do further.  Do I need to step you through verification that the packets are getting to your client via sniffing the traffic?

                          Tell you what – if you provide me vpn access to your network and login to pfsense box.  And then out of bound access to a windows client I will fix the problem for you.  Teamviewer works nice as an out of band solution.  I will document what was the issue and show you the fix, etc.  That would be must faster than us going round and round in this thread, not getting anywhere. If there is some other issue at play, I should be able to identify the problem within a few minutes.

                          But since you can access linux based boxes on that side of the tunnel - it really really points to a problem on the client box on your pfsense side of the network.

                          An intelligent man is sometimes forced to be drunk to spend time with his fools
                          If you get confused: Listen to the Music Play
                          Please don't Chat/PM me for help, unless mod related
                          SG-4860 24.11 | Lab VMs 2.8, 24.11

                          1 Reply Last reply Reply Quote 0
                          • L
                            LeCygne
                            last edited by

                            @johnpoz:

                            Set their firewalls to allow whatever traffic you want to use from your tunnel network.

                            Disable whatever firewall your running on those boxes.

                            That's the end of my story

                            1 Reply Last reply Reply Quote 0
                            • johnpozJ
                              johnpoz LAYER 8 Global Moderator
                              last edited by

                              So your fully working and functional now, even to your window boxes, which I take it were running firewalls blocking the traffic you wanted to allow.

                              So you get your browselist working, or live without that MS nonsense ;)

                              An intelligent man is sometimes forced to be drunk to spend time with his fools
                              If you get confused: Listen to the Music Play
                              Please don't Chat/PM me for help, unless mod related
                              SG-4860 24.11 | Lab VMs 2.8, 24.11

                              1 Reply Last reply Reply Quote 0
                              • L
                                LeCygne
                                last edited by

                                @johnpoz:

                                So your fully working and functional now, even to your window boxes, which I take it were running firewalls blocking the traffic you wanted to allow.

                                So you get your browselist working, or live without that MS nonsense ;)

                                As you said (without that MS nonsense)…thank you man your a hero .

                                1 Reply Last reply Reply Quote 0
                                • First post
                                  Last post
                                Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.