Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Site-Site connected no response

    Scheduled Pinned Locked Moved OpenVPN
    7 Posts 2 Posters 1.3k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • R
      rustydusty1717
      last edited by

      Hello,

      Having a heck of a time getting my VPN between Condo and House working. House obviously is server and condo is connecting into it. Here is some screenshots so hopefully someone can see what is going on. I can ping from condo to house's pfsense address and from house to condo but pfsense address only. I will need to do ping, dns and Active Directory replication eventually. Be happy to get ping and dns, though.

      Server:

      http://imgur.com/3DfbgNr

      http://imgur.com/8hPiYhU

      http://imgur.com/39OsM7P

      Client:

      http://imgur.com/aNToEaI

      http://imgur.com/nSmBD5N

      1 Reply Last reply Reply Quote 0
      • H
        heper
        last edited by

        i see you only allow icmp on your openvpn-tab firewall ?

        i'd suggest you start by adding a allow any->any on the openvpn (on both sides).
        if that works you can be certain that the openvpn configuration is OK.

        1 Reply Last reply Reply Quote 0
        • R
          rustydusty1717
          last edited by

          Done that and I can now ping other devices, still can't ping anything Windows related. Home network is an AD environment with GPO turning Windows Firewall off.

          Main thing is I need the pfsense box at condo to forward DNS queries to the local DNS at the house.

          1 Reply Last reply Reply Quote 0
          • H
            heper
            last edited by

            do the windows devices have their gateway pointed to pfsense ?

            1 Reply Last reply Reply Quote 0
            • R
              rustydusty1717
              last edited by

              Everything at the house is part of a domain environment. DHCP and DNS are served through the address of 10.0.0.4 which is the DC.

              From the condo to the house I can ping various devices and machines, besides anything that is apart of the domain. Forcing my laptop to temporarily use 10.0.0.4 as DNS doesn't resolve anything. Whether the domain controller at the house won't allow the subnet at the condo to resolve names I don't know.

              Whole purpose of this is replicate domain the controller at the house to the condo. About halfway there as the VPN is up and communication is there, minus being able to resolve any addresses at the house.

              1 Reply Last reply Reply Quote 0
              • H
                heper
                last edited by

                @heper:

                do the windows devices have their gateway pointed to pfsense ?

                1 Reply Last reply Reply Quote 0
                • R
                  rustydusty1717
                  last edited by

                  Sorry, yes they do. The pfsense at the house is virtualized on a hyper-v box. Pfsense at condo is an Alix board.

                  1 Reply Last reply Reply Quote 0
                  • First post
                    Last post
                  Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.