OpenVPN site-to-site using tap-device / Cannot access other LAN members

mwagner

Hi everybody,

I try to establish a layer-2 VPN using OpenVPN but I cannot reach other members on the LAN of the server site. Here is my scenario:

–------------------Site A-----------------------
pfsense 2.2.2

LAN 10.65.48.0/21

DHCP on 10.65.55.0 - 10.65.55.150

OpenVPN Server

Device Mode : tap
Server Mode Peer to Peer (SSL/TLS)
IPv4 Tunnel Network 10.65.60.0/23
IPv4 Local Network/s 10.65.48.0/21
Advanced : mode server
client-to-client

Allow-rules on the tap bridge device :

Protocol any
Source any
Destrinantion any
(no ther rules)
--------------------------END------------------

-------------------------Site B-----------------
pfsense 2.2.1

LAN bridged to OpenVPN, no IP

DHCP off

OpenVPN Client

Device Mode : tap
Server Mode Peer to Peer (SSL/TLS)
IPv4 Tunnel Network 10.65.60.0/23
IPv4 Local Network/s empty
Advanced : empty

Allow-rules on the tap bridge device :

Protocol any
Source any
Destrinantion any
(no ther rules)

When I connect with my computer from site B to the OpenVPN bridged interface to site A, I get an IP of the DHCP on site A. I can then access the pfsense IP, I have access to internet (WAN IP of site A) and to clients on other subnets (OPT1). But I can't access other clients on the LAN (10.65.48.0/21) on Site A .

Has anyone an idea what I'm doing wrong or what I have forgotten? Or maybe how can I have an layer-2 VPN otherwise.

Best regards,
Markus

LeoLinux

Did you get it working? I'm having the same issue: https://forum.pfsense.org/index.php?topic=117749.0