Pinging hosts over OPENVPN tunnel



  • I ve manage to connect two pfSense boxes using OPENVPN tunnel using shared key, but I cant get ping from host from A site to host at B site. Here is my config:

    Site A: (pfsense Server side)

    ADSL modem PPPOE –--DMZ----pfsense
    pfsense: WAN-DHCP, LAN : 192.168.50.250
    Added rule on wan : TCP/UDP  *  *  *  1194 (OpenVPN)  *
    OPEN VPN server conf:
    Port:UDP
    Address pool:192.168.200.0/24
    Remote network:192.168.51.0/24
    Cryptography:BF-CBC-128
    Authentication method: Shared Key

    Site B: (pfsense client side)

    ADSL modem PPPOE ----DMZ----pfsense
    pfsense: WAN-DHCP, LAN : 192.168.51.250
    OPEN VPN server conf:
    Port:UDP
    Server address:Dyndns host name
    Server port: 1194
    Interface IP: 192.168.51.0/24
    Remote network: 192.168.50.0/24
    Proxy Host: empty
    Proxy port:3128
    Cryptography:BF-CBC-128
    Authentication method: Shared Key

    Maybe I am missing some route on server/client side in Custom options?!

    Any suggestion?



  • If you look at the openvpn log: do you see anything indicating that the tunnel doesn't come up?
    If you ping from the pfsense webgui the other side of the tunnel: do you get a reply?



  • Yes the tunnel is up and I can ping from the pfsense webgui from both boxes, but I can’t ping from host (site A) to host (site B) or B Box and vice versa.

    Jun 14 08:06:07 openvpn[63204]: Inactivity timeout (–ping-restart), restarting
    Jun 14 08:06:07 openvpn[63204]: SIGUSR1[soft,ping-restart] received, process restarting
    Jun 14 08:06:09 openvpn[63204]: Re-using pre-shared static key
    Jun 14 08:06:09 openvpn[63204]: TCP/UDP: Preserving recently used remote address: WAN ADDRESS:1194 Jun 14 08:06:09 openvpn[63204]: Preserving previous TUN/TAP instance: tun0 Jun 14 08:06:09 openvpn[63204]: UDPv4 link local (bound): [undef]:1194 Jun 14 08:06:09 openvpn[63204]: UDPv4 link remote: WAN ADDRESS:1194 Jun 14 08:06:10 openvpn[63204]: Peer Connection Initiated with WAN ADREES:1024 Jun 14 08:06:10 openvpn[63204]: Initialization Sequence Completed
    Jun 14 08:06:19 openvpn[63204]: WARNING: 'ifconfig' is used inconsistently, local='ifconfig 192.168.200.1 192.168.200.2', remote='ifconfig 192.168.51.1 192.168.51.2'



  • You have an address mismatch between address pool (server config) and interface ip (client config), those two have to match on a PSK setup.

    Edit: The address range you pick for address pool/interface ip also has to be distinct from any other ip range used on your networks.



  • Thx i think i got it now. I ve changed Address pool to 10.0.8.0/24 (on servers side) an on client side Interface IP: to 10.0.8.0/24 and now i can ping from hosts on A site to host on B site. Now I am going to play with DNS. Thx once again.


Locked