Open vpn acess in local lan

[bmironb]

Hi,

I started open vpn service in pfsense 2.0.1, it's working, i mean i can connect to it from outside on wan.Instructions from here:http://www.youtube.com/watch?v=odjviG-KDq8
  Where i'm confused: open vpn it's not working like pptp vpn ? i mean when i'm connected to pptp vpn i have acess in lan pc's from pptp server pfsense, in open vpn it's not like that ? it's only a secure connections between users ? without lan clients on server ?
  Another thing with pptp vpn i when i'm connected as client i have ext ip from isp on it, with open vpn not :(…thing tried from outside pfsense.

Thanks !

[heper]

with the correct firewall rules & correct openvpn routes (local network / remote network), you should be able to connect to lan-devices

[johnpoz]

I connect to lan devices from my road warrior openvpn connection pretty much every day.

Here is ping to lan client from my vpn, traceroute.

D:>ping 192.168.1.7

Pinging 192.168.1.7 with 32 bytes of data:

Reply from 192.168.1.7: bytes=32 time=143ms TTL=63
Reply from 192.168.1.7: bytes=32 time=142ms TTL=63

D:>tracert 192.168.1.7

Tracing route to ubuntu.local.lan [192.168.1.7]
over a maximum of 30 hops:

1   146 ms   141 ms   144 ms  10.0.200.1
 2   147 ms   146 ms   144 ms  ubuntu.local.lan [192.168.1.7]

Trace complete.

D:>ipconfig
Windows IP Configuration

Ethernet adapter ovpn:
       Connection-specific DNS Suffix  . : local.lan
       IP Address. . . . . . . . . . . . : 10.0.200.6
       Subnet Mask . . . . . . . . . . . : 255.255.255.252
       Default Gateway . . . . . . . . . :

Check your rules and that your sending the route to your openvpn clients, and that they are getting and using them.

edit: ping times suck because I have to bounce off the proxy here at work to get out to the net and its located in Jax, FL ;)

[nutt318]

@johnpoz:

Check your rules and that your sending the route to your openvpn clients, and that they are getting and using them.

I'm having the sames issues as the above user, so my firewall rules look ok. Should I add a route somewhere to tell my 192.168.2.0 openvpn get to my 192.168.1.0 LAN?

[moh10ly]

that's weird, I have the same issue as well! I allowed all the rules and I can ping to the internal IP of Pfsense but to none of the other internal machines.
anyone solved this already?

[marvosa]

Post your tunnel settings and the firewall rules on your openvpn tab.