Pinging hosts over OPENVPN tunnel
-
I ve manage to connect two pfSense boxes using OPENVPN tunnel using shared key, but I cant get ping from host from A site to host at B site. Here is my config:
Site A: (pfsense Server side)
ADSL modem PPPOE –--DMZ----pfsense
pfsense: WAN-DHCP, LAN : 192.168.50.250
Added rule on wan : TCP/UDP * * * 1194 (OpenVPN) *
OPEN VPN server conf:
Port:UDP
Address pool:192.168.200.0/24
Remote network:192.168.51.0/24
Cryptography:BF-CBC-128
Authentication method: Shared KeySite B: (pfsense client side)
ADSL modem PPPOE ----DMZ----pfsense
pfsense: WAN-DHCP, LAN : 192.168.51.250
OPEN VPN server conf:
Port:UDP
Server address:Dyndns host name
Server port: 1194
Interface IP: 192.168.51.0/24
Remote network: 192.168.50.0/24
Proxy Host: empty
Proxy port:3128
Cryptography:BF-CBC-128
Authentication method: Shared KeyMaybe I am missing some route on server/client side in Custom options?!
Any suggestion?
-
If you look at the openvpn log: do you see anything indicating that the tunnel doesn't come up?
If you ping from the pfsense webgui the other side of the tunnel: do you get a reply? -
Yes the tunnel is up and I can ping from the pfsense webgui from both boxes, but I can’t ping from host (site A) to host (site B) or B Box and vice versa.
Jun 14 08:06:07 openvpn[63204]: Inactivity timeout (–ping-restart), restarting
Jun 14 08:06:07 openvpn[63204]: SIGUSR1[soft,ping-restart] received, process restarting
Jun 14 08:06:09 openvpn[63204]: Re-using pre-shared static key
Jun 14 08:06:09 openvpn[63204]: TCP/UDP: Preserving recently used remote address: WAN ADDRESS:1194 Jun 14 08:06:09 openvpn[63204]: Preserving previous TUN/TAP instance: tun0 Jun 14 08:06:09 openvpn[63204]: UDPv4 link local (bound): [undef]:1194 Jun 14 08:06:09 openvpn[63204]: UDPv4 link remote: WAN ADDRESS:1194 Jun 14 08:06:10 openvpn[63204]: Peer Connection Initiated with WAN ADREES:1024 Jun 14 08:06:10 openvpn[63204]: Initialization Sequence Completed
Jun 14 08:06:19 openvpn[63204]: WARNING: 'ifconfig' is used inconsistently, local='ifconfig 192.168.200.1 192.168.200.2', remote='ifconfig 192.168.51.1 192.168.51.2' -
You have an address mismatch between address pool (server config) and interface ip (client config), those two have to match on a PSK setup.
Edit: The address range you pick for address pool/interface ip also has to be distinct from any other ip range used on your networks.
-
Thx i think i got it now. I ve changed Address pool to 10.0.8.0/24 (on servers side) an on client side Interface IP: to 10.0.8.0/24 and now i can ping from hosts on A site to host on B site. Now I am going to play with DNS. Thx once again.
