Using OpenVPN on pfSense

jlw52761 · May 24, 2019, 3:18 PM

So I have a very odd situation where I have OpenVPN running on my pfSense install. Now if I want to use SSH and RDP then I can get to things on the LAN, but if I want to use HTTP or even as a a gateway then I'm not able to get this to work. What I mean is I have several things on the LAN that use HTTP, which doesn't work when connected over VPN. Now you may think it's something with the machine, except I can SSH to that machine just fine, just not open the web page on the device. Additionally, if I turn on "Force all client traffic" in OpenVPN, I can't browse the web or anything like that, so it's like OpenVPN is blocking HTTP and ICMP requests (ping doesn't work either) but not RDP or SSH.
Below is a diagram of my setup with fake IP's to represent the actual subnets, but hopefully it helps to form a picture of the config. My end goal is two fold, access anything on my LAN while connected via VPN and use my home VPN instead of paying for something like NordeVPN to secure my traffic on public WiFi.

                      +---------------+
                      |    iPhone     +
                      |   10.27.201.2 |
                      +-------+---*---+
                              |   *   
                              |   *   
                              |   *   
                        +-----+---*-+  
                        |         * |  
                        |    WAN  * |  
                        |         * |  
                        +-----+---*-+  
                              |   *   
                              |   *   
                              |   *
                              |   *                                     
                      +-------+---*-----X+--------------+               
                      |           ***********L3 TUN Connection***********
                      |                 X               |     +---------*--------+
                      |     pfSense     X    OpenVPN    |     |  OVPN (VLAN 11)  |
                      |  10.27.200.254  X  10.27.201.1  +-----+  10.27.201.0/24  |
                      |                 X               |     +------------------+
                      +--------+-------+X+--------------+
                               |
                               |
                               |       +-----------------+
     +-----------------+       +-------+  Desktop        |
     |  OctoPrint      +-------+       |  10.27.200.196  |
     |  10.27.200.174  |       |       +-----------------+
     +-----------------+       |
                      +--------+---------+
                      |  LAN (VLAN 30)   |
                      |  10.27.200.0/24  |
                      +------------------+