Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Site To Site VPN connected but traffic not going beyond far side

    Scheduled Pinned Locked Moved OpenVPN
    7 Posts 4 Posters 703 Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • I
      Infraevo
      last edited by

      Hi Everyone

      So I have 2 pfsense systems setup and am trying to create a site-2-site network link with OpenVPN.

      Site A - Server
      IP network: 10.0.0.0/8
      Transit Network: 172.16.0.1

      Site B - Client
      IP network: 192.168.1.0/24
      Transit Network: 172.16.0.2

      The 2 units are connected. When I do a ping test from site A it can ping anywhere into site B network. The reverse is also working. When I try to use a pc in site A and ping a pc in site B it fails and the reverse is also a failure. The pc in site A can ping 172.160.2 and the pc in site B can ping 172.16.0.1 . So the pc in each site gets to the firewall on the other side but not beyond it. I am probably missing one step but I am not sure where. Any help would be greatly appreciated.

      Rene

      ? 1 Reply Last reply Reply Quote 0
      • ?
        A Former User @Infraevo
        last edited by

        Hi @Infraevo
        Here is the relevant section of the pfSense book for configuring site-to-site OpenVPN, you may want to go over it to check your configuration against.

        https://www.netgate.com/docs/pfsense/book/openvpn/site-to-site-example-configuration-ssl-tls.html

        Also, here is the OpenVPN troubleshooting guide.

        https://www.netgate.com/docs/pfsense/book/openvpn/troubleshooting-openvpn.html

        Hope this helps.

        Thank you,

        -James

        1 Reply Last reply Reply Quote 0
        • I
          Infraevo
          last edited by

          Sorry forgot to mention using shared key

          ? 1 Reply Last reply Reply Quote 0
          • ?
            A Former User @Infraevo
            last edited by

            Hi @Infraevo

            Here is the section for PSK.

            https://www.netgate.com/docs/pfsense/book/openvpn/site-to-site-example-configuration-shared-key.html

            Thank you,

            -James

            1 Reply Last reply Reply Quote 0
            • M
              marvosa
              last edited by

              Post the server1.con from the server and client1.conf from the client.

              1 Reply Last reply Reply Quote 0
              • DerelictD
                Derelict LAYER 8 Netgate
                last edited by

                Why are you even trying to use 10.0.0.0/8? Are you anticipating 16 million hosts there?

                When you say Transit network do you mean OpenVPN Tunnel Network?

                How do the pings fail?

                Chattanooga, Tennessee, USA
                A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                Do Not Chat For Help! NO_WAN_EGRESS(TM)

                1 Reply Last reply Reply Quote 0
                • I
                  Infraevo
                  last edited by

                  Hi Folks

                  I tore the entire system down and redid it from scratch from the actual manual. This time it worked . So not sure what I missed but all is good now. Thanks for your input.

                  1 Reply Last reply Reply Quote 0
                  • First post
                    Last post
                  Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.