Openvpn cannot access LAN but can route to WAN.
-
Hello Geeks,
I am having issues accessing my LAN resources through OpenVPN server running in pfsense and I cannot figure out what went wrong. I am hoping that someone from this forum would help me out.
I had configured my rw vpn setup exactly as the following guide:
https://nguvu.org/pfsense/pfsense-inbound_vpn/. Infact all my other pfsense setup is based on this guide.It had been working great for me for years until it stopped working suddenly. I used it mainly to access PLEX, air sonic, etc, and to access other LAN resources using my IPHONE LTE provided by mint mobile. Just a couple of months ago, I was outside listening to music through my plex server (via openvpn) and got disconnected all of a sudden. When I got home, I tried to troubleshoot but couldn't figure out anything as nothing had changed, pfsense was still running and I could still access the internet. I still cannot figure out what is wrong as all the setup and routing looks good.
But recently while I was waiting at the pediatrics office for my daughter's appointment I decided to try to access my openvpn server using their spectrum wifi and, Wow!, I could access all my LAN resources again. Access to WAN worked too. I immediately switched back to my LTE but cannot access LAN but just WAN. Switched again to their wifi and again I can access both LAN and WAN. So I am very confused what is wrong with my setup. I tried to tweak few routing but no luck.
It does appears to be the routing issues as I can see the traffic flowing through the firewall. Could any of you help me fix my setup please?
Many Many Many Thanks!!!
-
@linuxlad said in Openvpn cannot access LAN but can route to WAN.:
It does appears to be the routing issues
That was my first thought reading this.
Possibly your provider routes your traffic through a private subnet which is overlapping with your home network.Maybe you can find it out by traceroute. You can use the HE.Net Network Tools on iphone to do that.
Or just move a single device of your home network into another subnet and add an alias in this subnet to the pfSense interface. In the OpenVPN settings you may have "redirect gateway" enabled, I guess as you're saying you have WAN access over the VPN. -
@viragomann
Thank you for replying to this post. Yes i can access WAN just fine though the openvpn. It’s just the local network that im having problem with. I wasn’t able to find any hop with overlapping private address with traceroute. Also my public ip on my mobile lte network is ipv6 only. Could this be a problem?And yes I have selective routing setup as described in the nguvu guide. Any traffic not directed to LAN networks would route via VPN gateway and all the traffic directed to LAN network would route via default gateway and looks like thats not happening.
Thanks,