Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    openvpn not all traffic routing thru tunnel

    OpenVPN
    2
    4
    401
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • J
      jfish
      last edited by

      I have setup a VPN Server at the site

      the LAN at remote site is 192.168.1.0/24
      The OpenVPN LAN subnet is 10.102.1.0/24

      I can connect sucessfully and get IP assigned in subnet 10.102.1.0/24 however all traffic not going thru the tunnel

      As an example my home network is 192.168.1.0/24 and the remote site LAN is also 192.168.1.0/24 so connecting to say 192.168.1.1 it connects to my local server and not the server on remote site

      I have checked the box in the server settings Force all client-generated IPv4 traffic through the tunnel.

      Anything I am missing, firewall rules look all ok

      V 1 Reply Last reply Reply Quote 0
      • V
        viragomann @jfish
        last edited by

        @jfish said in openvpn not all traffic routing thru tunnel:

        As an example my home network is 192.168.1.0/24 and the remote site LAN is also 192.168.1.0/24

        How should the machine know to which device you want to connect to at this moment?

        So change one of the LAN networks IP ranges. 192.168.1.0/24 is newer a good choice if you want to run a VPN and connect to remote networks.

        J 1 Reply Last reply Reply Quote 0
        • J
          jfish @viragomann
          last edited by

          @viragomann

          I wouild assume the setting to route all traffic on client thru VPN tunnel to remote site, so connecting to IP address 192.168.1.1 would connect to remote host and not the local host on my subnet, unless I am missing something here

          V 1 Reply Last reply Reply Quote 0
          • V
            viragomann @jfish
            last edited by

            @jfish
            Your computer is in your LAN, same as 192.168.1.1. So if your computer sends a packet to 192.168.1.1, the packet goes directly to the destination machine, without passing pfSense. Only packets for IP addresses outside your LAN subnet are sent to the default gateway (pfSense).
            So pfSense is not able to route these packets to anywhere, cause it doesn't get them at all.

            1 Reply Last reply Reply Quote 0
            • First post
              Last post
            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.