Navigation

    Netgate Discussion Forum
    • Register
    • Login
    • Search
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search

    Can't forward VPN traffic to web server running in LAN network

    OpenVPN
    3
    6
    386
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • U
      UncleC last edited by UncleC

      Hi,
      I'm running PfSense in a VirtualBox on my Debian host system and try to route traffic from my VPN to a web server running in my LAN network my goal is to access it over a specific port on my VPN Gateway and I can't find out what is wrong with my configuration. Another maybe corresponding problem is, that clients can reach each other by pinging inside my VPN network but streaming (for example with Iperf) doesn't work, but stream from PfSense to the clients does work fine.

      Here you can see my configuration:




      And the clients view via ifconfig:

      My clients are all manjaro linux systems tested with 416, 417 and 418 kernel.
      Thanks in advance and ask me if you have any questions.

      1 Reply Last reply Reply Quote 0
      • V
        viragomann last edited by

        I guess pfSense is not the default gateway in the LAN.
        So assuming the virtual LAN interface is bridged to your LAN network, you can solve it by adding a static to the web server for the VPN tunnel network pointing to pfSense LAN address.

        1 Reply Last reply Reply Quote 0
        • U
          UncleC last edited by

          I'm sorry but I don't really understand what you mean, I use pfsense as gateway for my lan network and I'm not using any VLAN. I've set the openVPN interface for the forward rule so I think pfsense should be able to route the requests. As additional information I should say the web server runs inside a container on the host system of my server and has the IP 192.168.0.5 my aim is to reach it inside my VPN network by calling 192.168.1.1:1337.

          1 Reply Last reply Reply Quote 0
          • V
            viragomann last edited by

            So the virtualized pfSense is the default gateway in the LAN and on the corresponding web server as well?

            So why don't you access the web server directly?
            If the route to LAN is pushed to the VPN client, there should be no need for port forwarding.

            U 1 Reply Last reply Reply Quote 0
            • U
              UncleC @viragomann last edited by

              @viragomann I've tried that before, but for any reason I can't find any lan device then, and this doesn't solve my problem that the clients can't stream data to each other.

              1 Reply Last reply Reply Quote 0
              • Derelict
                Derelict LAYER 8 Netgate last edited by

                What are addresses VPN net and VPN address If you assigned an interface to the OpenVPN instance then set addresses and gateways on that interface you did it wrong.

                Why port forward at all? Why not just directly route to 192.168.0.5?

                Chattanooga, Tennessee, USA
                The pfSense Book is free of charge!
                DO NOT set a source port in a port forward or firewall rule unless you KNOW you need it!
                Do Not Chat For Help! NO_WAN_EGRESS(TM)

                1 Reply Last reply Reply Quote 0
                • First post
                  Last post