Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    VPN can only ping one way

    Scheduled Pinned Locked Moved OpenVPN
    3 Posts 2 Posters 3.3k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • J
      jwtz
      last edited by

      Hi,

      I have the following setup:

      DDWRT Router (Client, 192.168.15.1) - VPN Tunnel - PFsense (Server, 192.168.16.1). I use PKI encryption for communication.

      Here are my PFsense (Server) settings:

      Local port: 1194
      Address pool: 10.0.8.0/24
      Local network: 192.168.16.0/24
      Remote: 192.168.15.0/24

      I have client to client VPN checked.

      The client is setup pretty much the same way and can also connect to the tunnel, it get's an IP adress of 10.0.8.6, which indicates that the tunnel should work fine, now here's where it get's weird.

      From the DDWRT router I can ping the PFSense and all the 192.168.16.x clients, but not the other way around. The firewall doesn't make any deny logs either. What could be my problem?

      1 Reply Last reply Reply Quote 0
      • GruensFroeschliG
        GruensFroeschli
        last edited by

        For a normal site-to-site connection i wouldn't use a PKI, but a PSK setup.

        If you really want to go the PKI way:
        Look at this howto: http://forum.pfsense.org/index.php/topic,12888.0.html

        From your description, i'd say you're missing a client specific config (iroute).

        We do what we must, because we can.

        Asking questions the smart way: http://www.catb.org/esr/faqs/smart-questions.html

        1 Reply Last reply Reply Quote 0
        • J
          jwtz
          last edited by

          Hi, thanks for your answer. I edited the client specific config as you can see in the following image.

          In this image you can see my routing tables on the PFSense:

          These are the routing tables of my DD-WRT:

          I really can't see the problem…

          1 Reply Last reply Reply Quote 0
          • First post
            Last post
          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.