[SOLVED]Tunnel up but no connections between client LAN to server LAN
-
https://doc.pfsense.org/index.php/Why_can%27t_I_ping_some_OpenVPN_adapter_addresses
Ping something on the LAN, not the tunnel address.
-
I cant ping any adress on LAN on both sides. When i looked at the servers firewall logs, i see this :
action Time interface source dest proto X Dec 10 18:40:40 ovpns1 10.0.1.2 192.168.1.3 ICMP -
Check your OpenVPN Firewall rules. Most people set to pass any any any to start then tighten when they know the VPN is working.
-
I already added a rule in openvpn tab after creating the server to accept traffic from any to any on both sides
-
Maybe you did it wrong because if it was right the traffic would be passing there.
How about you post what you have done instead of just saying what you think you have done.
There is nothing in your OP talking about 10.0.1.2 or 10.0.1.0/24. Where is that source IP address coming from?
-
Sorry for misleading you. From my OP, I indicated there tat my tunnel network is 10.10.10.0/24, it is now 10.0.1.0/24 please see my screensots
-
You can't have 192.168.1.0/24 as remote networks on both sides.
-
so im going to remove 192.168.1.0/24 from client remote network field? i sorry for this idiotic question, i dont know what to do. :'( i followed all the steps in the tutorial but i cant get it to work.
-
No you are trying to VPN two networks, both 192.168.1.0/24. That can't work. Well, at least without herculean NAT efforts.
-
Can you suggest something that i should do or change? I dont understand when you said "you are trying to VPN two networks, both 192.168.1.0/24" the server network is the only 192.168.1.0/24 network on the client pfsense is 172.16.0.0/24 thats behind a 192.168.10.0/24 ISP router.
-
Only going by what you posted.
The remote networks on both client and server are shown as 192.168.1.0/24.
The remote networks on the server should be 172.16.0.0/24
On the client 192.168.1.0/24
-
Thank you good Sir. I'll give it a try tomorrow.
-
Thank you very much Mr. Derelict. My VPN is working now :)
