Connect from LAN to OpenVPN client — help please?d

jg3

Also, if its a VPN client on a windows machine, was it install as admin and is the client running as admin?
If not, you will APPEAR to be connected, but nothing is really routed to, from or through pfsense/openvpn.

In testing the firewall config I've been using a mac running Viscosity, in the end we'll be using an Ubuntu system. No windows.

Thanks for the help.

Maybe I go drink vodka and watch TV now while configuring using the wizard. Seemed to work for other people. :o

kejianshi

Hmmmm. I've never used MAC as a client.

I did USE to have split routing issues with Ubuntu 10.04 but not recently.

Try it with a couple of windows clients, which are very simple, and see if thats working.

If it works, its not the servers. Its the clients.

Then vodka…

kyreservoirdog

Fixed

Should have checked it first, but antivirus firewall on the VPN client was the culprit…..Sorry

I'm having the same issue as jg3. Ran through all the same steps to find root cause. In the end, I can't get any traffic from my internal LAN to hit the VPN client.

jg3, did you ever get this figured out?

jg3

@kyreservoirdog:

jg3, did you ever get this figured out?

I did — apologies for not reporting back (bad form!). I'm glad that you solved it but for the record:

I have a 1:1 NAT for an host using an additional public IP (not the IP of the firewall). There's a corner case or two where VPN'd clients would want to reach the internal host via the public IP. So I had created another public-private 1:1 NAT rule and applied it to the OpenVPN interface. This worked to solve the aforementioned problem, but caused the host the NAT applied to not to be able to connect to VPN clients (other hosts on the internal nework could still connect to VPN clients).

So, if you've come here looking for help … about all I can tell you is: don't do that.

--jg3