site to site cannot ping between LAN clients
ale992 last edited by
I've setup an openvpn site-to-site between my home and my parents home following this guide: https://www.virtualtothecore.com/create-a-stretched-lan-between-your-site-and-vcloud-using-pfsense/
The subnet in both sites is 192.168.10.0/24
The LAN interface at my parents home (Site A) is 192.168.10.1 and at my home (Site B) is 192.168.10.200
DHCP is enabled in both sites, range is 192.168.10.100 - 192.168.10.149 in Site A and 192.168.10.150 - 192.168.10.199 in Site B, as in the guide is blocked by the firewall so it will not cross the bridge.
I can ping between 192.168.10.1 and 192.168.10.200 and nothing else: pfsense at Site A cannot ping Site B LAN clients and pfsense at Site B cannot ping clients in Site A LAN.
After some tried i've noticed that after tried to ping from "Client A" (192.168.10.100) at Site A, to "Client B" (192.168.10.151) at Site B, in the pfsense ARP Table at Site B was registered an entry for Client A:
so there is some traffic passing the tunnel but
Here is the server configuration at Site A
The config of the client at Site B
Firewall rules at Site A
Site B firewall
I'm quite new to this type of config with OpenVPN, i've only used a road warrior setup for my phone and nothing else.
Seems to me like the bridge between the LAN and the VPN interface is not properly setup, but i can't see anything wrong here:
emammadov last edited by
It will work If you disable firewall or allow ping requests from other subnets in firewall in clients machines.
ale992 last edited by ale992
I'm using two win10 clients for test, aside from the pfsense boxes. I've already enabled the rules on both windows firewalls and pings work in each site. Am i losing something in pfsense configs? Why i should enable ping from other subnets, the purpose of this is to make all clients figure as in the same LAN
I'd recommend you to change one sides subnet and run OpenVPN in default and recommended tun mode.