Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Routing traffic over pfsense openvn

    Scheduled Pinned Locked Moved Routing and Multi WAN
    2 Posts 1 Posters 264 Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • F
      fireix
      last edited by fireix

      Update: I managed to fix it, I can now ping remote subnet from locally attached PC, now I just have to find out why... I didn't really do any big changes before it suddenly worked.

      I have pfSense OpenVPN (client in pfsense fw) a to pfSense VPN (also pfsense, but server) b. Only really need one way init of the connection, similar to roadwarrior-setup.

      VPN-setup went good. I have 17.16.16.2 client and 17.16.6.1 server-side. I can ping the remote endpoints from each side and I can even ping the hosts on the server /24 subnet on the server-side like I spesified on the Server - this is from pfSense itself on the opt1/opt2 ports (virtual ports, as they are not connected physically). If I choose the wan/lan interface (where I actually have the only connection), I get no reply.

      I do only have one WAN-interface/ethernet connection because the a client pfsense is only a node on the network to provide vpn to the network and is not default gw for these. Have the pfsense fw in bridge-mode on client side, but I think this is overkill now..

      I have open fw on all interfaces (even allow all type of traffic on floating), activated opt1/opt2 (vpn-interface w/o cable connected).

      I do see this in fw log (192.168.0.1 is ISPs broadband router)

      WAN icmp 192.168.0.11:1 -> 192.168.2.100:1 0:0 4 / 0 240 B / 0 B

      I usually do this on client computers (that last IP is my pfsense unit that responds to ping on WAN-interface):
      route add 192.168.2.0/24 192.168.0.21

      I can ping 17.16.16.2 / 17.16.16.1 - so vpn tunnel from both sides are up - even from my local computer attached to pfsense network client A.

      I assume this is only a roting/fw issue - or is there some secret checkbox I also need? The vpn-log doesn't reveal any errors and both sides reports OK with no error in the vpn-logfiles. Can it be some inter-port communication issue?

      1 Reply Last reply Reply Quote 0
      • F
        fireix
        last edited by

        And the winner was outgoing NAT-rule on the VPN-interface :)

        1 Reply Last reply Reply Quote 0
        • First post
          Last post
        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.