Can't see hosts behind second gateway

[mrsunfire]

Hi guys!

I set up an OpenVPN Server on my pfSense 2.0.2. So far so good, I can connect and use the WAN. This is my setup:

ISP modem –------ pfSense -------- DLink Router --------- PC's (192.168.0.x)
external IP          192.168.1.1/24    192.168.1.199/24      - Server (192.168.0.197)

OpenVPN is on 192.168.3.0/24. If I now connect with a device to the VPN, it gets for example the 192.168.3.6. Now I can ping the router (192.168.1.199), or show webpages from the server via 192.168.1.199. I also can ping FROM the Server (192.168.0.197) to the device (192.168.3.6) but I can't ping TO the server (192.168.0.197). Every IP from DLink routers LAN (192.168.0.x) I can't ping. pfSense also can't ping, or trace them.

I think the problem is, that pfSense don't knows where the 192.168.0.x addresses are. But I'm on my end to try to learn them.

How can I learn pfSense to route all the 192.168.0.x addresses over the DLink router (192.168.1.199), or where is my problem?

[mrsunfire]

Well, as it seems he pfSense is working fine. I think the problem is, that the DLink router is a router with a NAT. So he can't route all from WAN to LAN. Accessing LAN via WAN seems impossible.

If I setup a static route for 192.168.0.0/24 with gateway 192.168.1.199 in pfSense and try to ping 192.168.0.197, I can see on logs that there is an attemp to reach via the route, but nothing happens. So I think the DLink gets the order on his WAN to route the request to 192.168.0.197, but he says "no, I don't let you access the LAN subnet".

Might this be the problem?

[mrsunfire]

This was the problem! DLink Router can't route LAN IP's from the WAN side, to the LAN side!

How to solve? -> connect the LAN from pfsense to a LAN of the router! Don't use WAN side anymore and DEACTIVATE (!!) DHCP and UPnP on router!

Thats it!