Cannot access LAN from OpenVPN server to pfSense OVPN client



  • Hi all,

    I have a server with a regular OpenVPN server installed with network 192.168.30.0/24. I have a few RoadWarrior machines that connect directly to it and want to add my home LAN 192.168.10.0/24 to it as well. The pfSense OpenVPN client is working well enough for devices from my LAN to access the server via the VPN, but I also need the server to be able to connect to machines in my LAN.

    Server
    <publicip>x.x.x.x
    <openvpn>192.168.30.1

    netstat -nr

    Kernel IP routing table

    | Destination | Gateway | Genmask | Flags | MSS | Window | irtt | Iface |
    | 192.168.30.2 | 0.0.0.0 | 255.255.255.255 | UH | 0 | 0 | 0 | tun0 |
    | 192.168.30.0 | 192.168.30.2 | 255.255.255.0 | UG | 0 | 0 | 0 | tun0 |
    | 192.168.10.0 | 192.168.30.2 | 255.255.255.0 | UG | 0 | 0 | 0 | tun0 |
    | 0.0.0.0 | 0.0.0.0 | 0.0.0.0 | U | 0 | 0 | 0 | venet0 |

    VPN Network 192.168.30.0/24

    pfSense
    LAN 192.168.10.0/24
    VPN 192.168.30.6

    | Destination | Gateway | Flags | Refs | Use | Mtu | Netif |
    | 127.0.0.1 | link#9 | UH | 0 | 290 | 16384 | lo0 |
    | 192.168.10.0/24 | link#2 | U | 0 | 365280 | 1500 | re1 |
    | 192.168.10.1 | link#2 | UHS | 0 | 0 | 16384 | lo0 |
    | 192.168.30.0/24 | 192.168.30.5 | UGS | 0 | 8 | 1500 | ovpnc1 |
    | 192.168.30.1 | 192.168.30.5 | UGHS | 0 | 3176 | 1500 | ovpnc1 |
    | 192.168.30.5 | link#11 | UH | 0 | 0 | 1500 | ovpnc1 |
    | 192.168.30.6 | link#11 | UHS | 0 | 0 | 16384 | lo0 |

    The OpenVPN server is configured with route 192.168.10.0 255.255.255.0 and push "route 192.168.30.0 255.255.255.0". I followed this guide and my pfSense 'seems' to be configured well for machines to access the server 192.168.30.1 (and any machine connected to the VPN) from the LAN.
    What I need now is for at least the server to be able to connected to machines on the pfSense LAN. I created open 'any' rules for the OpenVPN connection firewall, and duplicated the Manual Outbound NAT rules but the server just cannot ping anything on 192.168.10.0/24, nor the pfSense VPN connection 192.168.30.6.

    Any help as to where to look next would be appreciated.</openvpn></publicip>


Locked