Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Routing multiple LAN-s in OpenVPN

    Scheduled Pinned Locked Moved OpenVPN
    11 Posts 4 Posters 2.4k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • DerelictD
      Derelict LAYER 8 Netgate
      last edited by

      Which end is the OpenVPN server and which is the client?

      Chattanooga, Tennessee, USA
      A comprehensive network diagram is worth 10,000 words and 15 conference calls.
      DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
      Do Not Chat For Help! NO_WAN_EGRESS(TM)

      1 Reply Last reply Reply Quote 0
      • N
        nijaz
        last edited by

        Router A is server and RouterB is client

        1 Reply Last reply Reply Quote 0
        • DerelictD
          Derelict LAYER 8 Netgate
          last edited by

          Add 192.168.1.0/24 to the Remote Networks on Router A and be sure traffic is allowed from 192.168.1.0/24 on Router A's OpenVPN tab or assigned interface.

          Chattanooga, Tennessee, USA
          A comprehensive network diagram is worth 10,000 words and 15 conference calls.
          DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
          Do Not Chat For Help! NO_WAN_EGRESS(TM)

          1 Reply Last reply Reply Quote 0
          • N
            nijaz
            last edited by

            Thanks mate,
            I did what you told me to do, tested Ping and tracert and it worked!

            When i tried to connect to database which is in 192.168.1.0/24 network i could not connect.

            I than started ping and tracert again, and it didnt worked anymore.

            I can still ping 172.16.1.0/24 network.
            I attached printscreen of my VPN / OpenVPN / Server / Tunel settings / IPv4 Remote Network settings on Server

            Is there any other thing that maybe blocking my traffic?
            Thanks again!
            PS: Sorry for my bad English :-[

            tunel.JPG
            tunel.JPG_thumb

            1 Reply Last reply Reply Quote 0
            • V
              viragomann
              last edited by

              Do you have more OpenVPN connections up than this one at server or client?

              1 Reply Last reply Reply Quote 0
              • N
                nijaz
                last edited by

                Yes, i have 19 of them.
                I manage to setup connection, ping and tracert is working now.

                I now need to allow SQL connection from PC0 to PC2
                SQL server is on PC2

                If i understand this, i need to create port forwarding for SQL ports on RouterA?

                1 Reply Last reply Reply Quote 0
                • V
                  viragomann
                  last edited by

                  19 vpn servers or clients?!

                  No, you don't need port forwarding there. The traffic is routed between the host over vpn.
                  If the routing is working you just need a firewall rule allowing the traffic on openvpn interface of router A, as Derelict mentioned above.

                  Do have set an outbound NAT rule for the vpn traffic on router B for the 192.168.1.0/24 networks interface?

                  1 Reply Last reply Reply Quote 0
                  • N
                    nijaz
                    last edited by

                    Im sorry guys, but I still didnt make this work
                    This is My network topology.

                    Edi and Ted can ping one another
                    Ted and Maria can ping one another

                    Edi and Maria CANT ping one another

                    USA is my VPN server for 19 VPN clients. This is first time that i need to add 2 LAN networks on one VPN Client.

                    When i ping from Spain pfSense 192.168.1.1 /24 port on USA pfSense 172.16.0.1 /24 port it works.

                    When i ping PC to PC it doesnt work

                    I added Firewall rule to allow ICMP protocol any to any on all three networks.

                    How to allow them to ping.
                    What am i missing?
                    Thanks a lot

                    PfSense.JPG
                    PfSense.JPG_thumb

                    1 Reply Last reply Reply Quote 0
                    • DerelictD
                      Derelict LAYER 8 Netgate
                      last edited by

                      Local software firewalls on the PCs?

                      Chattanooga, Tennessee, USA
                      A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                      DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                      Do Not Chat For Help! NO_WAN_EGRESS(TM)

                      1 Reply Last reply Reply Quote 0
                      • M
                        marvosa
                        last edited by

                        This appears to be a simple setup… post the openvpn configs from both sides (server1.conf and client1.conf respectively) and we'll have a better idea of what is happening.

                        1 Reply Last reply Reply Quote 0
                        • First post
                          Last post
                        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.