Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Unable to route to private network from openVPN connection?

    Scheduled Pinned Locked Moved OpenVPN
    15 Posts 3 Posters 817 Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • D
      diana_shik @KOM
      last edited by

      @kom Ok.
      After switching to IPv4 Local network(s) in tunnel settings to 10.10.10.1/16 my route table looks like this:

      IPv4 Route Table
      ===========================================================================
      Active Routes:
      Network Destination        Netmask          Gateway       Interface  Metric
                0.0.0.0          0.0.0.0      192.168.1.1    192.168.1.105     50
              10.10.0.0      255.255.0.0       10.10.70.1       10.10.70.2    281
             10.10.70.0    255.255.255.0         On-link        10.10.70.2    281
             10.10.70.2  255.255.255.255         On-link        10.10.70.2    281
           10.10.70.255  255.255.255.255         On-link        10.10.70.2    281
              127.0.0.0        255.0.0.0         On-link         127.0.0.1    331
              127.0.0.1  255.255.255.255         On-link         127.0.0.1    331
        127.255.255.255  255.255.255.255         On-link         127.0.0.1    331
            192.168.1.0    255.255.255.0         On-link     192.168.1.105    306
          192.168.1.105  255.255.255.255         On-link     192.168.1.105    306
          192.168.1.255  255.255.255.255         On-link     192.168.1.105    306
              224.0.0.0        240.0.0.0         On-link         127.0.0.1    331
              224.0.0.0        240.0.0.0         On-link     192.168.1.105    306
              224.0.0.0        240.0.0.0         On-link        10.10.70.2    281
        255.255.255.255  255.255.255.255         On-link         127.0.0.1    331
        255.255.255.255  255.255.255.255         On-link     192.168.1.105    306
        255.255.255.255  255.255.255.255         On-link        10.10.70.2    281
      ===========================================================================
      Persistent Routes:
        None
      

      I have now:

              10.10.0.0      255.255.0.0       10.10.70.1       10.10.70.2    281
      

      If I run tracert 10.10.10.2 I get:

      Tracing route to 10.10.10.2 over a maximum of 30 hops

      1 23 ms 23 ms 30 ms 10.10.70.1
      2 * * * Request timed out.
      3 * * * Request timed out.

      So now I am routed to the tunnel but still can't access the LAN.

      KOMK 1 Reply Last reply Reply Quote 0
      • KOMK
        KOM @diana_shik
        last edited by

        @diana_shik Does your OpenVPN tab have any rules? It should have an Allow All rule created by the wizard but best to double-check.

        D 1 Reply Last reply Reply Quote 0
        • D
          diana_shik @KOM
          last edited by

          @kom Yes, it have an allow all.
          Also there is an inbound pass to openvpn port on the WAN.

          KOMK 1 Reply Last reply Reply Quote 0
          • KOMK
            KOM @diana_shik
            last edited by

            @diana_shik Anything of note in the OpenVPN log in System Logs?

            1 Reply Last reply Reply Quote 0
            • V
              viragomann @diana_shik
              last edited by

              @diana_shik
              First thing to ask, is pfSense the default gateway in the remote network?

              1 Reply Last reply Reply Quote 0
              • D
                diana_shik
                last edited by

                @viragomann Yes it is.
                Also I am able to pint and trace this IP from pfsense LAN intarface.

                V 1 Reply Last reply Reply Quote 0
                • V
                  viragomann @diana_shik
                  last edited by

                  @diana_shik said in Unable to route to private network from openVPN connection?:

                  Also I am able to pint and trace this IP from pfsense LAN intarface

                  Okay, so check the following, please:
                  On pfSense go to Diagnostic > Ping
                  Do a ping to a machine you want to reach from VPN. Should work, I assume.
                  Then change the source to OpenVPN and try again.

                  If you don't get a respond you have to check the destination device. Maybe its firewall is blocking the access.

                  D 1 Reply Last reply Reply Quote 0
                  • D
                    diana_shik @viragomann
                    last edited by

                    @viragomann What do you mean by "Do a ping to a machine you want to reach from VPN"

                    Under Diagnostics-> Ping I don't have VPN.
                    Should I?

                    I do have my openVPN and I loose all packets.

                    V 1 Reply Last reply Reply Quote 0
                    • V
                      viragomann @diana_shik
                      last edited by

                      @diana_shik
                      You should find your OpenVPN server in the drop-town.
                      You can simultanously do a sniff the packets on the LAN interface to see what's going on.

                      If you see the request packets on the LAN, but no responses, the destination machine either blocks the access from other networks by its own firewall or it has a different default route.
                      You may disable the firewall on the device for testing.

                      D 1 Reply Last reply Reply Quote 1
                      • D
                        diana_shik @viragomann
                        last edited by

                        @viragomann I see.

                        I can ping and route from LAN successfully.
                        I can not ping or route from openVPN.

                        1 Reply Last reply Reply Quote 0
                        • First post
                          Last post
                        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.