OpenVPN Connecting, but can't access LAN IP's
-
OK, I am sure i have done something wrong in the setup, but for the life of me can't work it out.
I have the tunnel setting shown in the pictures.
When I connect with openvpn, my routing table looks like this:
Active Routes:
Network Destination Netmask Gateway Interface Metric
0.0.0.0 0.0.0.0 10.0.0.1 10.0.0.113 55
10.0.0.0 255.255.255.0 On-link 10.0.0.113 311
10.0.0.113 255.255.255.255 On-link 10.0.0.113 311
10.0.0.255 255.255.255.255 On-link 10.0.0.113 311
10.10.0.0 255.255.255.0 10.11.0.1 10.11.0.2 291
10.11.0.0 255.255.255.0 On-link 10.11.0.2 291
10.11.0.2 255.255.255.255 On-link 10.11.0.2 291
10.11.0.255 255.255.255.255 On-link 10.11.0.2 291
10.16.0.0 255.255.255.0 10.11.0.1 10.11.0.2 291
10.17.0.0 255.255.255.0 10.11.0.1 10.11.0.2 291
127.0.0.0 255.0.0.0 On-link 127.0.0.1 331
127.0.0.1 255.255.255.255 On-link 127.0.0.1 331
127.255.255.255 255.255.255.255 On-link 127.0.0.1 331
224.0.0.0 240.0.0.0 On-link 127.0.0.1 331
224.0.0.0 240.0.0.0 On-link 10.0.0.113 311
224.0.0.0 240.0.0.0 On-link 10.11.0.2 291
255.255.255.255 255.255.255.255 On-link 127.0.0.1 331
255.255.255.255 255.255.255.255 On-link 10.0.0.113 311
255.255.255.255 255.255.255.255 On-link 10.11.0.2 291so it looks the entries for 10.10.0.0/24, 10.16.0.0/24, 10.17.0.0/24 are correctly added to my routing table. But i still can't access machines on those addresses.
I have an allow all rule on my OpenVPN interface
Not sure what to check next.
-
Is the pfSense which is running the OpenVPN server the default gateway in the remote networks?
Check if you are able to ping the internal interfaces of pfSense.
-
Another common issue on Windoze networked machines is that they might not recognize ping/other traffic originating on the VPN tunnel networks.
You can try temporarily turning off the firewall on one of the LAN devices to see if it makes a difference.Agree with viragomann , step 1 is try to ping the pfSense VPN tunnel, then the pfSense Lan interface, then move on to the LAN
-
@codemonkey76
By any chance are you running pfS 2.4.3?
I ran into this same problem when upgrading from 2.4.2.
No change in Configuration(s). Same firewall rules.
Can connect and ping port addresses of pfSense box, but not beyond.
Worked perfectly with 2.4.2 (and 32 bit versions).Same openvpn version (2.4.4), same SSL library version(1.0.2m) on both 2.4.2 and 2.4.3
I'd like to understand what has broken.