Particular computer not accessible through OpenVPN tunnel
-
I set up my first OpenVPN instance on our pfSense (inspired by this video - https://www.youtube.com/watch?v=xiy52Hn5bTc)
- tunnel network 10.0.15.0/24
- local network 10.0.0.0/24
- I assigned OPT3 interface to this OpenVNP instance, restarted OpenVPN service afterwards
- deleted the default pass rule from "OpenVPN" firewall tab, created it in "OPT3" tab instead
Test connection works, the test laptop was assigned 10.0.15.2, routes were created. I could ping devices in 10.0.0.0/24 - like 10.0.0.1, 10.0.0.6 or 10.0.0.39 (my PC). The only one I cannot ping is 10.0.0.118 (which actually is the one I set up VPN for).
But I can ping 10.0.0.118 from my PC (10.0.0.39) at the same time.
What could I have wrong?
-
Maybe 10.0.0.118 blocks access from the VPN tunnel subnet. Check the firewall of that device.
-
Yup viragomann hit on the most likely problem. Firewall on device not like traffic from other than local segment. Windows out of the box firewall will block ping from outside its own segment for example.
Other possible and common reason is device your trying to reach not using pfsense as its gateway. So there is no way for it to even answer if it wanted too. Have seen say IP camera's not have a way to set a gateway even.. So without source natting the traffic at pfsense its not possible to talk to them from other segments.
-
Looks like that was it. The box with 10.0.0.118 was provided by out external supplier and when first connecting it to our network, they chose "public network" (for whatever reason). I changed it to "home network" and I can ping it now as well as connect to RDP. I can sure tune the Win 7 firewall in advanced settings but it is good for now.
Gateway is okay, the PC got its IP from our DHCP server.
Thank you, guys! :)
