Cannot access LAN from OpenVPN server to pfSense OVPN client
-
Hi all,
I have a server with a regular OpenVPN server installed with network 192.168.30.0/24. I have a few RoadWarrior machines that connect directly to it and want to add my home LAN 192.168.10.0/24 to it as well. The pfSense OpenVPN client is working well enough for devices from my LAN to access the server via the VPN, but I also need the server to be able to connect to machines in my LAN.
Server
<publicip>x.x.x.x
<openvpn>192.168.30.1netstat -nr
Kernel IP routing table
| Destination | Gateway | Genmask | Flags | MSS | Window | irtt | Iface |
| 192.168.30.2 | 0.0.0.0 | 255.255.255.255 | UH | 0 | 0 | 0 | tun0 |
| 192.168.30.0 | 192.168.30.2 | 255.255.255.0 | UG | 0 | 0 | 0 | tun0 |
| 192.168.10.0 | 192.168.30.2 | 255.255.255.0 | UG | 0 | 0 | 0 | tun0 |
| 0.0.0.0 | 0.0.0.0 | 0.0.0.0 | U | 0 | 0 | 0 | venet0 |VPN Network 192.168.30.0/24
pfSense
LAN 192.168.10.0/24
VPN 192.168.30.6| Destination | Gateway | Flags | Refs | Use | Mtu | Netif |
| 127.0.0.1 | link#9 | UH | 0 | 290 | 16384 | lo0 |
| 192.168.10.0/24 | link#2 | U | 0 | 365280 | 1500 | re1 |
| 192.168.10.1 | link#2 | UHS | 0 | 0 | 16384 | lo0 |
| 192.168.30.0/24 | 192.168.30.5 | UGS | 0 | 8 | 1500 | ovpnc1 |
| 192.168.30.1 | 192.168.30.5 | UGHS | 0 | 3176 | 1500 | ovpnc1 |
| 192.168.30.5 | link#11 | UH | 0 | 0 | 1500 | ovpnc1 |
| 192.168.30.6 | link#11 | UHS | 0 | 0 | 16384 | lo0 |The OpenVPN server is configured with route 192.168.10.0 255.255.255.0 and push "route 192.168.30.0 255.255.255.0". I followed this guide and my pfSense 'seems' to be configured well for machines to access the server 192.168.30.1 (and any machine connected to the VPN) from the LAN.
What I need now is for at least the server to be able to connected to machines on the pfSense LAN. I created open 'any' rules for the OpenVPN connection firewall, and duplicated the Manual Outbound NAT rules but the server just cannot ping anything on 192.168.10.0/24, nor the pfSense VPN connection 192.168.30.6.Any help as to where to look next would be appreciated.</openvpn></publicip>