Navigation

    Netgate Discussion Forum
    • Register
    • Login
    • Search
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search

    Traceroute problem

    OpenVPN
    2
    3
    2819
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • B
      baskin last edited by

      I have the following wierd setup although it works.

      (Wireless Community network)–-WAN (10.215.1.253/30)---pfsense 1.0.1---LAN (192.168.1.1/24) ----(Lan net)----ADSL router (192.168.1.2/24)

      Openvpn server runs on the pfsense box to allow wireless clients (from the community network) to access the local lan and the internet through the pfsense box and the ADSL router.

      Openvpn clients are on 192.168.130.0/24 assigned by the openvnp server.

      Everything is working except traceroute.

      As openvpn client (192.168.130.6) I can ping the LAN interface of the pfsense box (192.168.1.1), I can ping LAN hosts, I can ping the ADSL router (192.168.1.2), I can ping internet sites, but I can't traceroute to any destination outside the LAN.

      If i try to traceroute to the ADSL router i get:

      traceroute to 192.168.1.2 (192.168.1.2), 30 hops max, 38 byte packets
       1  192.168.130.1 (192.168.130.1)  3.089 ms  2.404 ms  2.159 ms
       2  192.168.1.2 (192.168.1.2)  2.874 ms  4.298 ms  2.955 ms
      

      As i understand the traceroute packets are going as expected through the tunnel.

      All traceroutes to other destination fail. I can see web pages and any other type of traffic seems to working.

      I have noticed similar problems with ipsec vpns (with linux boxes not pfsense) where i had to change the ttl value of the tunnel, but i can not find how to try it with openvpn. Its just a guess.

      1 Reply Last reply Reply Quote 0
      • GruensFroeschli
        GruensFroeschli last edited by

        if you traceroute to a host on the internet where from do you get timeouts?
        could you put such a traceroute output here?

        what are your custom options?
        you might want to try to add:
        push "redirect-gateway local def1"
        to absolutely ensure that everything goes over your Pf

        We do what we must, because we can.

        Asking questions the smart way: http://www.catb.org/esr/faqs/smart-questions.html

        1 Reply Last reply Reply Quote 0
        • B
          baskin last edited by

          False alarm. :)

          The problem is on the ADSL router. I can't traceroute also from the LAN to the internet (traffic goes only through the ADSL router)

          So nothing to do with pfsense.

          Thanks for the response.

          1 Reply Last reply Reply Quote 0
          • First post
            Last post