NAT for OpenVPN

[dale]

Hi,

I have a little problem.
I'm setting up a pfsense with a management vlan and OpenVPN to access it.

I have it set up like this:
LAN -> 10.0.0.1\24
WAN -> ext ip
MGMT -> 192.168.254.1\24
OpenVPN -> 192.168.253.0\24

Client connects to VPN without any problems and get an ip 192.168.253.6

Also there is a server (192.165.254.2) and a cisco switch (192.168.254.3)

I have correct access to the server but can't even ping the switch.
from what I found the switch replys only to addresses on the same subnet and from the server logs I can see that the client connects with 192.168.253.6 ip.

Is it possible to NAT all OpenVPN traffic without forcing all traffice on the client to go via VPN?

BR Chris

[phil.davis]

I expect it would work. The NAT goes on the interface where the traffic is leaving pfSense, so put a NAT rule on LAN for traffic with a source address of 192.168.253.0/24 to NAT to LAN address. Then the traffic from OpenVPN clients to LAN should look like it comes from the pfSense LAN IP.

[dale]

Thanks.

Got this working finally.
Made a mistake in the outbound rule and that's whats caused the problem.

BR Chris