Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Cant communicate with slave/backup pfsense instance via OpenVPN

    Scheduled Pinned Locked Moved OpenVPN
    4 Posts 2 Posters 2.1k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • J
      jedblack
      last edited by

      Hi all,

      I have a weird problem…

      I got to 2x Pfsense 2.0R instances running (192.168.1.9/10), :LAN segment is 192.168.1.0, :openvpn segment is 170.32.10.0/24

      When I VPN into 192.168.1.9(via WAN interface) I can ping the GW (192.168.1.9) and I can ping anything on my LAN segement.  However, I CANNOT ping/access the slave/backup Pfsense instance(192.168.1.10), but if I remote desktop into a windows instance (192.168.1.112) I can ping/access(80) the instance(192.168.1.10)

      Any ideas.... i'm tapped out

      Thanks guys/gals.

      1 Reply Last reply Reply Quote 0
      • jimpJ
        jimp Rebel Alliance Developer Netgate
        last edited by

        That's normal, due to the routing involved.

        Could probably work around it with some outbound nat trickery on the LAN (nat from openvpn clients to the lan ip if they try to access the other box's IP).

        Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

        Need help fast? Netgate Global Support!

        Do not Chat/PM for help!

        1 Reply Last reply Reply Quote 0
        • J
          jedblack
          last edited by

          Hi Jimp,

          Could you elaborate a little bit more?

          I wouldnt' do a 1:1, but a 'outbound', and i would have to change it for automatic to manual correct?

          1 Reply Last reply Reply Quote 0
          • jimpJ
            jimp Rebel Alliance Developer Netgate
            last edited by

            well the easiest thing to do would be outbound NAT on the LAN interface, source of the openvpn subnet, translated to the LAN IP of the box.

            Yes, you'd have to switch to manual.

            You could do 1:1 NAT on LAN from an OpenVPN IP to a VIP (non-CARP!) in the LAN subnet, but that would only work for one client with a static IP.

            Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

            Need help fast? Netgate Global Support!

            Do not Chat/PM for help!

            1 Reply Last reply Reply Quote 0
            • First post
              Last post
            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.