Cannot access static IPs on LAN from VPN

bryon · Mar 26, 2020, 10:59 PM

I have a strange problem where I have successfully configured my VPN and can connect from an iPhone and another macOS device. However I can only access the LAN port of pfSense, or machines that have their IP address served from pfSense's DHCP server. Anything with a static IP is unreachable - even if I provide a DHCP static mapping.
The static IP addresses are outside the range allocated by DHCP but in the same subnet.
I don't even know how to start debugging this one. Ideas?
Thanks in advance
Bryon

viragomann · Mar 26, 2020, 11:28 PM

Is pfSense the default gateway on all your LAN devices?

Ensure that the destination machines firewall doesn't block the access.

bryon · Mar 27, 2020, 10:20 AM

Hi,
I have debugged this a little further and the problem is not quite what I thought. My environment has pfSense running as a VM in Proxmox. I can access everything but Proxmox (which is what I was testing against all along).

Proxmox has 3 NICs. Two dedicated to pfSense for LAN/WAN and one as a management NIC.
Proxmox LAN IP address is 10.10.10.50/16 and all VMs share this bridge
pfSense VM LAN IP address is 10.10.0.1/16
pfSense VM WAN IP address is auto assigned

I have reset the DHCP range to 10.10.10.1-10.10.10.49 and I can SSH and ping anything on my internal network except the hypervisor hosting pfSense - which is a problem because I can't start VMs remotely...

Thanks

viragomann · Mar 27, 2020, 1:25 PM

@bryon said in Cannot access static IPs on LAN from VPN:

Proxmox has 3 NICs. Two dedicated to pfSense for LAN/WAN and one as a management NIC.
Proxmox LAN IP address is 10.10.10.50/16 and all VMs share this bridge

So you have a separate management interface for Proxmox, but Proxmox is connect internally to the LAN bridge or to both?

Have set the gateway correctly in Proxmox? It must be the pfSense LAN IP.

That's the same issue, we discussed here a view days ago: https://forum.netgate.com/topic/151472/access-proxmox-management-when-pfsense-is-not-running

bryon · Mar 27, 2020, 11:53 PM

@viragomann - THANK YOU.
That was the problem. I had recently changed from a an external modem handling PPPoE to moving PPPoE onto pfSense. Proxmox needed to have the ADSL modem IP address because of the chicken and egg scenario of building the pfSense VM after I built and patched up Proxmox. I forgot about Proxmox's gateway address needing to change.
I really appreciate the help.
Bryon