Connection failed REMOTE SERVER
-
Hi, VPN client behind pfsense does not connect to remote server, help please.
-
@cobca what sort of vpn? openvpn, ipsec, wireguard, etc.
What is the error your getting, are you trying to resolve a fqdn, using the IP directly?
Are you doing any sort of filtering on your lan side blocking ports, or forcing traffic out a vpn connection. Running IPS on pfsense? Using any sort of dns filtering?
My work laptop vpns just fine into my work vpn.
-
inside pfsense I have a windows 10 client with check point VPN, it connects well; On the same pc I have a software that establishes a connection to a remote server using the VPN, this connection fails.
-
@johnpoz inside pfsense I have a windows 10 client with check point VPN, it connects well; On the same pc I have a software that establishes a connection to a remote server using the VPN, this connection fails.
-
@cobca well if your connection to the vpn shows up and working - and you can access other stuff the vpn seems more like a problem with that specific vpn.
Pfsense could have no possible way to stop something inside the vpn connection.. While sure it would be possible for pfsense to cause an issues with making the vpn connection, once that is established pfsense would have zero insight to anything flowing through the vpn.
-
@johnpoz When they remove the windows client behind pfsense and connect it directly to the wan connection, everything works fine! I don't understand that
-
@cobca well maybe that application or whatever is not actually going through vpn. But there is just not really anything pfsense could do with traffic inside a vpn.. It has no way to see that traffic, it only sees the outer vpn connection..
Maybe there is some sort of split tunnel setup on this vpn connection, and the network when your on pfsense seems like it should split tunnel for the IP your trying to access. But when your on the wan routers network, which I assume is also rfc1918 it doesn't split tunnel and sends the traffic down the vpn?
-
This post is deleted! -
@johnpoz Is there a way to know how the vpn behind pfsense is working?
-
@cobca what do you mean how its working? Can you get to other stuff through this vpn?
Your saying you can not connect to this server, what about other resources - is this your work vpn? Can you get to email, other resources on the other end of the vpn. Or are you just trying to connect to this one server?
What is the IP of this server. You could also be running into a problem where the IP ranges on the other end of the vpn are say for example 192.168.1/24 and your local network is also 192.168.1/24 - that for sure can be problematic.
And would also explain why it works when you connect it direct to your router, because no your IP is say 192.168.2/24 which ties in with my split tunnel example.
-
@johnpoz Your explanation is very good, thank you.
