Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Yes, another "Can't ping the network behind the firewall" question.

    Scheduled Pinned Locked Moved
    OpenVPN
    2
    7
    2.9k
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • B
      benutne
      last edited by

      What do I need to post for help and what should I take out for security reasons?  I suspect everyone wants the config file on the server and client, along with the log file for the client.  All those I can get.  My other concern is cleaning the logs/configs of sensitive data, which being new to OpenVPN, I have no idea what is and what isn't sensitive.

      1 Reply Last reply Reply Quote 0
      • B
        benutne
        last edited by

        Sorry, I ought to clarify.  I've already got a site to site VPN working, and now I'm trying to get roadwarriors up.  The log shows no errors whatsoever and it appears to connect fine, but I get no access to things behind my firewall.  And I've followed this forum post to the letter.

        Thanks.

        1 Reply Last reply Reply Quote 0
        • GruensFroeschliG
          GruensFroeschli
          last edited by

          Maybe you should start with a diagram and an accurate description what you're trying to achieve.

          Then what you already tried and how the result differs from what you want.

          We do what we must, because we can.

          Asking questions the smart way: http://www.catb.org/esr/faqs/smart-questions.html

          1 Reply Last reply Reply Quote 0
          • B
            benutne
            last edited by

            @GruensFroeschli:

            Maybe you should start with a diagram and an accurate description what you're trying to achieve.

            Then what you already tried and how the result differs from what you want.

            For my own sake or to help describe to problem to the forum?  I have a strong feeling its a NAT/firewall rule issue.  I'm not used to explicitly defining my firewall rules.  What about my question as to what is safe to post for config files/logs?

            1 Reply Last reply Reply Quote 0
            • GruensFroeschliG
              GruensFroeschli
              last edited by

              For the sake of me understanding your setup and finding out whats wrong.

              There is no firewall/NAT for OpenVPN per default.
              You have to enable manually Advanced outbound NAT to get NAT functionality.
              It's not possible to firewall the OpenVPN-interface at this time.
              So no this cannot be the problem ;)

              The configs/logs are safe to post. Just dont post the content of the key-files.
              You might want to remove the remote public IP's.

              We do what we must, because we can.

              Asking questions the smart way: http://www.catb.org/esr/faqs/smart-questions.html

              1 Reply Last reply Reply Quote 0
              • B
                benutne
                last edited by

                I got it working.  The NAT was a non issue since I just allow all outgoing NAT at the moment.  What was important to set up was the firewall rules allowing my Road Warrior subnet access using the correct gateway and port.  Thanks for the help.

                1 Reply Last reply Reply Quote 0
                • GruensFroeschliG
                  GruensFroeschli
                  last edited by

                  Could you desribe this a bit more?
                  Because as i wrote before: there is no firewall for OpenVPN.

                  We do what we must, because we can.

                  Asking questions the smart way: http://www.catb.org/esr/faqs/smart-questions.html

                  1 Reply Last reply Reply Quote 0
                  • First post
                    Last post