<![CDATA[One host inaccessible, others are fine]]>OpenVPN works and I can connect just fine. I can access most hosts. Except one. They're all on the same network. I can ping 192.168.1.1 and .50 but not .11 even though it does respond to pings from hosts on that LAN. It's not only ICMP, same story with HTTP.

]]>https://forum.netgate.com/topic/167933/one-host-inaccessible-others-are-fineRSS for NodeFri, 16 Oct 2026 21:30:13 GMTTue, 16 Nov 2021 21:22:23 GMT60<![CDATA[Reply to One host inaccessible, others are fine on Sat, 04 Dec 2021 08:33:56 GMT]]>@audiobahn
If a device is accessible from other devices within the same subnet, but not from the VPN or other network segments it should be accessible from outside with NAT though, because this way the packets get a source IP from its own subnet.

However, in most cases it is the firewall on the respective device itself, which is simply blocking outside access. So the NAT is a hack and not recommended. You should better configure the devices firewalls accordingly.

There are only rare dumb devices, which have no possibility to configure a gateway, where NAT is a good workaround.

]]>https://forum.netgate.com/post/1013051https://forum.netgate.com/post/1013051Sat, 04 Dec 2021 08:33:56 GMT<![CDATA[Reply to One host inaccessible, others are fine on Sat, 04 Dec 2021 01:07:08 GMT]]>@viragomann said in One host inaccessible, others are fine:

@peterlecki said in One host inaccessible, others are fine:

The device is a managed switch

Does it have a gateway setting?

Even this or any, you can do a workaround with masquerading on pfSense by setting up an outbound NAT rule for this device.

Hi, I'm having a similar issue with some ports of a specific host not being accessible over an OpenVPN connection even though they're accessible over the LAN. Would the "NAT" work around work for this issue?

]]>https://forum.netgate.com/post/1013044https://forum.netgate.com/post/1013044Sat, 04 Dec 2021 01:07:08 GMT<![CDATA[Reply to One host inaccessible, others are fine on Thu, 18 Nov 2021 18:04:47 GMT]]>@viragomann @Bambos
Thanks guys for pointing out yet another user error ID10T

]]>https://forum.netgate.com/post/1010923https://forum.netgate.com/post/1010923Thu, 18 Nov 2021 18:04:47 GMT<![CDATA[Reply to One host inaccessible, others are fine on Thu, 18 Nov 2021 08:29:52 GMT]]>i had this issue before. The problematic device gateway, is not the pfsense lan gateway as it should.

]]>https://forum.netgate.com/post/1010843https://forum.netgate.com/post/1010843Thu, 18 Nov 2021 08:29:52 GMT<![CDATA[Reply to One host inaccessible, others are fine on Wed, 17 Nov 2021 22:27:46 GMT]]>@peterlecki said in One host inaccessible, others are fine:

The device is a managed switch

Does it have a gateway setting?

Even this or any, you can do a workaround with masquerading on pfSense by setting up an outbound NAT rule for this device.

]]>https://forum.netgate.com/post/1010804https://forum.netgate.com/post/1010804Wed, 17 Nov 2021 22:27:46 GMT<![CDATA[Reply to One host inaccessible, others are fine on Wed, 17 Nov 2021 22:20:31 GMT]]>@viragomann
The device is a managed switch so it doesn't have a firewall but it could be hard-coded to only communicate with hosts on the same subnet. Which would explain why I can't reach from the VPN subnet.

]]>https://forum.netgate.com/post/1010802https://forum.netgate.com/post/1010802Wed, 17 Nov 2021 22:20:31 GMT<![CDATA[Reply to One host inaccessible, others are fine on Wed, 17 Nov 2021 21:29:52 GMT]]>@peterlecki
Check the hosts firewall. It might block access from outside the subnet it resides.

]]>https://forum.netgate.com/post/1010779https://forum.netgate.com/post/1010779Wed, 17 Nov 2021 21:29:52 GMT