Can't See Remote Network Shares
-
I'm using pfSense CE 2.7.2. on identical mini PC hardware in two different states. I just setup my first site to site VPN using IPsec. I followed these instructions and added the firewall rules at both ends. I have different subnets at both locations. The computers at both locations are running Windows 11 Pro.
https://docs.netgate.com/pfsense/en/latest/recipes/ipsec-s2s-psk.html
The VPN is working. I can enter site A local IP addresses when at site B in "network" using the notation "\\local IP address" and can see all of the shares on my two NAS boxes. I can ping both NAS boxes and I can login to both NAS web interfaces if I launch a browser and type in their local IP addresses. But I can't do the same for my Windows PC shares. "\\local IP address" does not find Site A computers. I can't ping their addresses. I CAN do a remote desktop protocol session at site B by using the local PC IP addresses at site A. But I thought I was supposed to be able to see all the shares at both sites, not just shares on the NAS boxes.
What am I missing? Thanks!
-
@XrayDoc88 said in Can't See Remote Network Shares:
What am I missing?
I would guess the firewall on the window 11 boxes, out of the box they prob not going to allow an IP that is not a local IP.. You would have to adjust the firewall on them to allow whatever network your other site is using. For ping and SMB.
-
@johnpoz Thanks for the quick reply. I'll look at that. I did notice that I have "network discovery" and "printer and file sharing" enabled for private networks. Do I need to also enable them for public networks? That sounds like a bad idea, but I've never setup a site to site VPN before, so I'm not certain all that might be necessary.
-
@XrayDoc88 normally the firewall rules when you enable something only allow the network the device is on.. private and public just modes windows will put the firewall on, if its using the public policy it will block any inbound, etc..
if your remote nettwork is say 192.168.20/24 and your local network is 192.168.10/24 you would go into the rules and allow the 192.168.20 network.. Or for that matter just turn off the firewall on the host.
