Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Pfsense OpenVpn RDP to LAN net.

    General pfSense Questions
    6
    9
    1593
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • N
      Nicolay1995
      last edited by

      I have set up OpenVPN on PFsense and have VPN connection working to pfsense.
      Now i want to RDP to one of my Virtuel machines from my VPN connection.

      What steps do i have to do to allow RDP access to my LAN network. Currently all iv done is added the LAN network to OpenVPN 0_1552081042186_86eefacd-c913-4d5b-912e-440397431155-image.png

      and a standar rule is in place on WAN from when i set upp OpenVPN.
      0_1552081098503_4fb84a26-557f-42f4-a43a-6ab035fb3bad-image.png

      The vm i want to connect to is in a LAN network with everything open.
      0_1552081177095_4421ed69-fdda-4a04-a249-895339b355fa-image.png

      I have also enabled RDP on the VM i wanne connect to.

      What do i need to do to get RDP to this VM.

      Any suggestions would be helpfull., im new to PFsense.
      Thank you

      1 Reply Last reply Reply Quote 0
      • KOMK
        KOM
        last edited by

        That looks good. Perhaps change the IPv4 TCP to * for your OpenVPN rule in the last image.

        1 Reply Last reply Reply Quote 0
        • N
          Nicolay1995
          last edited by

          the problem is still cannot RDP to the LAN network.
          Do i need some port forwarding or what could be missing?

          1 Reply Last reply Reply Quote 0
          • RicoR
            Rico LAYER 8 Rebel Alliance
            last edited by

            This VM you want to RDP is using pfSense as gateway?

            -Rico

            2x Netgate XG-7100 | 11x Netgate SG-5100 | 6x Netgate SG-3100 | 2x Netgate SG-1100

            1 Reply Last reply Reply Quote 0
            • N
              Nicolay1995
              last edited by

              Yes it is.

              1 Reply Last reply Reply Quote 0
              • RicoR
                Rico LAYER 8 Rebel Alliance
                last edited by

                When describing a whole /24 network you would normally put 172.25.0.0/24 in your IPv4 Local network box, not 172.25.0.1/24
                Is the third screenshot showing your LAN firewall rules or OpenVPN group tab?

                -Rico

                2x Netgate XG-7100 | 11x Netgate SG-5100 | 6x Netgate SG-3100 | 2x Netgate SG-1100

                1 Reply Last reply Reply Quote 0
                • T
                  tim.mcmanus
                  last edited by

                  Have you done a ping/traceroute from the client connected to the VPN and the RDP server?

                  1 Reply Last reply Reply Quote 0
                  • johnpozJ
                    johnpoz LAYER 8 Global Moderator
                    last edited by

                    Can tell 1 of the most common mistakes is they forget the host firewall. Windows out of the box is not going to allow some remote IP to RDP to them.

                    I rdp into my boxes on multiple segments on my home network all the time via vpn..

                    And keep in mind @Rico point... That is not a local network, that is host address.. The way I would read that, and prob pfsense as well is the HOST 172.25.0.1 is here if you want to connect to it... Not 172.25.0.0/24 which equals .1-254

                    Look in your route table on your client what do you see?

                    So here are routes to my home networks via connection to vpn from work
                    C:\Windows\System32>route print | find "192.168"
                    192.168.2.0 255.255.255.0 10.0.8.1 10.0.8.3 276
                    192.168.3.0 255.255.255.0 10.0.8.1 10.0.8.3 276
                    192.168.9.0 255.255.255.0 10.0.8.1 10.0.8.3 276

                    An intelligent man is sometimes forced to be drunk to spend time with his fools
                    If you get confused: Listen to the Music Play
                    Please don't Chat/PM me for help, unless mod related
                    SG-4860 23.05 | Lab VMs CE 2.6, 2.7

                    1 Reply Last reply Reply Quote 1
                    • T
                      tkvrace
                      last edited by

                      Same problem here, as johnpoz said, its a problem related to the windows host, in my case, not enough memory.
                      On windows servers if there is not enough memory, RDP is blocked.

                      1 Reply Last reply Reply Quote 0
                      • First post
                        Last post