LAN access to VPN clients
-
Hello,
A few days ago, I decided to use pfSense as a firewall for my VPS.
In my configuration I set up OpenVPN to be able to connect a remote server as well.When the remote server is connected via OpenVPN, it can connect to the VPS (ping works, so does SSH, etc.)
But when I SSH directly into the VPS, I can not connect to the remote server.I am an absolute newbie when it comes to pfSense, I thought this would be easier to setup.
It would be nice if someone knows how to solve this problem. I'd be happy to share certain configs if needed.
Thanks in advance.
~ Lars
-
https://hardforum.com/threads/pfsense-2-0-1-openvpn-configuration-guide.1663797/
This helped me configure a tap interface. I use it to remotely bridge into my home network using openvpn. It will not serve well for remote browsing. You use the tun interface for that on a different server. I have two servers, one tap for bridging back home and one tun for remote browsing via the home router.
When connected using tap, your pc acts as if it's on the same network at home. You don't need ssh.
-
How about just a basic drawing..
So your using pfsense on your vps? or your using it at the location your connecting to the vps from, and you have a client connection to the vps.. or your vps has a client connection into pfsense at your location? Or s2s connection.
I am confused to where your trying to access the remote server? is that your vps, your own lan network from the vps as your vpned into the vps from pfsense?
As to using TAP.. Sorry that is just bad advice..
-
How about just a basic drawing..
As to using TAP.. Sorry that is just bad advice..
Agree a drawing helps. Even then it's sometimes hard to understand the objective.
What's your issue with tap? It works exceptionally well for me to bridge into my home network from afar. When researching how to do it, I found little to no info on using tun to accomplish the same objective. Tun appears to be for routing internet browsing only, at least to me. Tap was tricky to set up, but works perfectly and with 100% reliability, unless openvpn is blocked in general, which is rare.
-
I went over some of the bad things with it in your other thread where you mentioned it. But for another one with tap as you mention you get the same network. This can be a problem if the remote location your at happens to use the same network which is very common with 192.168.0 and 192.168.1/24 etc.
As to openvpn being blocked, that would have nothing to do with if using tap or tun.
