Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Openvpn SITE 2 SITE Portforwarding

    Scheduled Pinned Locked Moved OpenVPN
    16 Posts 3 Posters 1.3k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • M
      monster4000
      last edited by monster4000

      Hey

      there is no rules in the openvpn tab on both sites

      Lan at the siteB (client) is 10.0.0.0/24 i want to open port 8006 on 10.0.0.2
      Lan at siteA (server) is 10.8.10.0/24

      both sites got an ip in the interface tap after i restarted openvpn.

      1 Reply Last reply Reply Quote 0
      • DerelictD
        Derelict LAYER 8 Netgate
        last edited by Derelict

        Then you probably need to check on the server why it is not responding. Looks like everything is in place that needs to be (assuming there really are no rules on the OpenVPN tab at Site B).

        Attempt a connection then do Diagnostics > States on the Site B side and filter on 8006. What do you see?

        Packet capture on Site B LAN filtering on address 10.0.0.2 and port 8006 and attempt a connection. What do you see?

        What do the server logs on 10.0.0.2 say?

        The LAN network at Site A is not a party to this traffic.

        Chattanooga, Tennessee, USA
        A comprehensive network diagram is worth 10,000 words and 15 conference calls.
        DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
        Do Not Chat For Help! NO_WAN_EGRESS(TM)

        1 Reply Last reply Reply Quote 0
        • M
          monster4000
          last edited by

          0_1536275105378_state.png

          0_1536275163578_openvpntap.png

          1 Reply Last reply Reply Quote 0
          • M
            monster4000
            last edited by monster4000

            But i should still be able to reach site A from site B aka ping 10.8.10.1 form 10.0.0.1 right?

            nevermind that works

            Reply from 10.8.10.1: bytes=32 time=23ms TTL=63
            Reply from 10.8.10.1: bytes=32 time=22ms TTL=63
            Reply from 10.8.10.1: bytes=32 time=23ms TTL=63
            Reply from 10.8.10.1: bytes=32 time=23ms TTL=63
            Reply from 10.8.10.1: bytes=32 time=22ms TTL=63
            Reply from 10.8.10.1: bytes=32 time=22ms TTL=63
            Reply from 10.8.10.1: bytes=32 time=23ms TTL=63
            Reply from 10.8.10.1: bytes=32 time=22ms TTL=63
            Reply from 10.8.10.1: bytes=32 time=24ms TTL=63
            Reply from 10.8.10.1: bytes=32 time=22ms TTL=63
            Reply from 10.8.10.1: bytes=32 time=23ms TTL=63
            Reply from 10.8.10.1: bytes=32 time=23ms TTL=63
            Reply from 10.8.10.1: bytes=32 time=22ms TTL=63
            
            1 Reply Last reply Reply Quote 0
            • M
              monster4000
              last edited by

              GOT IT WORKING!!!!

              before i was trying from my desktop located at 10.0.0.204 that did not work, then i took my laptop and connected to my phone hotspot and boom there was connection

              lets say i setup a mail server port 25, now i know to get incoming stuff but what about outgoing via vpn?

              1 Reply Last reply Reply Quote 0
              • DerelictD
                Derelict LAYER 8 Netgate
                last edited by

                You would have to policy route those connections on the local interface out the OpenVPN gateway and the other side would need to perform Outbound NAT for that traffic out its internet connection.

                Chattanooga, Tennessee, USA
                A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                Do Not Chat For Help! NO_WAN_EGRESS(TM)

                1 Reply Last reply Reply Quote 0
                • M
                  monster4000
                  last edited by

                  Okay

                  So a firewall rule on siteB?
                  And outbound nat siteA?

                  1 Reply Last reply Reply Quote 0
                  • M
                    monster4000
                    last edited by

                    From what i can Google
                    Make firewall rule with source 10.0.0.2 port 25 and under the Advance tap select the VPN GW? Right?

                    1 Reply Last reply Reply Quote 0
                    • M
                      monster4000
                      last edited by

                      Do anyone know how i should do this?

                      1 Reply Last reply Reply Quote 0
                      • M
                        monster4000
                        last edited by

                        Hello

                        okay i got it working now :)

                        1 Reply Last reply Reply Quote 0
                        • First post
                          Last post
                        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.