SiteToSite only oneway

Gianni71

Hi all,
i succesfully created a site-to-site vpn with pfSense 24.11 but i can ping (or connect to tcp port) only one way, The client can ping the server but the server cant ping the client.
From the client i can connect RDP to the machine 10.1.0.5 with windows server.

Here is the configuration :
Server ip 10.1.0.4 tun 10.0.8.0/24
Client ip 192.168.1.243

Any help?

Gertjan

@Gianni71

The client replies to ping ? Yeah, maybe, but there are exceptions.

Windows devices will reply to ping requests when the orig,nating IP is form within thier own network, or/24
Outside of that, and this, afaik, is your case, they won't, so a visit to the firewall Windows client is needed.

Exactly like the RDP acces btw : connection are accepted by default from 'the same network', but not from else where. To make it work, you had to adapt the windows incoming firewall.

Gianni71

@Gertjan i have disabled the firewall on windows and i can ping from local network but not from pfsense.

I cant even ping from pfSense server to pfSense client (i mean the pfSense ip address).

Thanks

Gertjan

@Gianni71 said in SiteToSite only oneway:

I cant even ping from pfSense server to pfSense client (i mean the pfSense ip address).

Firewall rules on these interfaces ?

Gianni71

Solved, since i'm using azure vm i'd to add route on azure portal.

Thanks to all