Can't access LAN from VPN clients

zoiobnu

I have the following setup on my firewall:

LAN: 10.0.2.0/24
PROXMOX: 10.0.1.0/24
VPN: 10.0.4.0/24

I can access LAN from PROXMOX and PROXMOX from LAN without problems, but i can't access LAN or PROXMOX from VPN.

My config:

viragomann

@zoiobnu
Is pfSenes the default gateway on all devices you want to reach via VPN?

Note that pfSense filter rules has to be created on the interface, where the traffic is coming in. So rules for LAN source on Proxmox is useless. And also the other way round.

"OpenVPN" is an interface group, and rule on group tabs have priority over rules on member interface. Therefor your OpenVPN rule shows some hits, while the VPN rule shows none.

zoiobnu

@viragomann I literally understood nothing of what you said.

PfSense its my only firewall on network.

VPN connects directly to the firewall, as well as the entire network.

viragomann

@zoiobnu
So the communication should work from the point of routing.

That the pass rule on the OpenVPN tab shows traffic and states, means that it let pass access.

So possible it is blocked by the destination devices.
On pfSense you can only sniff the traffic on the outgoing interfaces (Proxmox or LAN) with Diagnostic > Packet Capture for further investigation.
If you see request packets, but no responses the destination device does not respond.
If you see both also sniff the traffic on the VPN interface to see, if responses are directed back properly.

zoiobnu

@viragomann Ping receive on firewall but can't reply back

viragomann

@zoiobnu
And how does the traffic look like on the VPN interface?
Maybe responses are not routed back properly for whatever reason.

Also ensure that hardware checksum offloading is disabled in System > Advanced > Networking.

zoiobnu

@viragomann said in Can't access LAN from VPN clients:

Also ensure that hardware checksum offloading is disabled in System > Advanced > Networking.

Thanks this fixed my problem

viragomann

@zoiobnu
This is strictly recommended, when running pfSense on KVM with VirtIO NICs: Virtualizing with Proxmox VE

The Proxmox guide is representative for any KVM installation.

zoiobnu

@viragomann Now i can't connect to proxmox server only, but any other service is working