Trying to Acces syncthing from LAN net to OpenVPN connected device in pfsense
-
God vibes to all,
I have the situation with a client that the upload speed isn't to good to work remotely in the live environment of the network I have them connected to VPN 24x7 trough OpenVPN and access the LAN services of the network with a couple folders map into the user session. There is a AD running on LAN and that single PC is add to the domain but when is connected trough VPN doesn't see the domain but can see and access the NFS shares on LAN with proper user/pass. I have map into the VPN server tunnel the LAN network. The Idea behind is to use Syncthing to sync the folders the client needs to the VPN client PC and keep connections local withing the network and don't publish Syncthing online the syncronization can be working on the background slow it while they are working locally on the data.
Probably is not the better scenario, but I open to listen to recommendations we have many experts here on the chat and I really appreciate it
OpenVPN net = 192.168.10.0/24
LAN net =10.10.10.0/24192.168.10.0/24 ping and acces 10.10.10.0/24
but
10.10.10.0/24 don't ping 192.168.10.0/24Also want to shape the traffic a little bit just that PC can access just the NAS on the LAN witch is 10.10.10.5 and the OpenVPN connected PC is the 192.168.10.2
In this case Syncthing in OpenVPN client sees the Syncthing server in 10.10.10.5 but not viceversa.
Any help how to setup this matter in pfsense
bolded text -
@athostech
The client might block the access by its firewall. You will have to allow access in its settings.
To make Windows firewalls smoothly, I set the VPN as private network. Then the firewall allows access to services, which configure it automatically on setup.Why want you to use Syncthing over VPN at all? Sycthing does encryption on it's own and can also use SSL certificates to authenticate nodes as far as I know.
-
@viragomann
I'm trying to still with the traffic over the VPN tunnel and don't expose the syncthing encrypted traffic trough the internet, that way don't need to NAT any ports on remote touter. I will check how to set up VPN as private network I don't have any idea but i will investigateThanks