Accessing multiple networks from an Open VPN connection
-
Hi all,
I am trying to figure out where in my configuration I have gone wrong. I am using 2.1.3-RELEASE (i386)
Problem: I am able to ping and access all devices on the 192.168.2.1/24 network, but only 10.100.10.70 on the 10.100.10.71/24 network. I know there are other devices on the 10.100.10.71/24 network because i can ping them using the Diagnostic->ping option and if ssh into pfsense and open up a shell i can also ping the devices for ex: 10.100.10.103.
Here is my setup:
LAN (bridged) -> OPT1, OPT2, OPT4: Static IPv4 with DHCP server running (192.168.2.1/24)
PRV5 (OPT3 originally): Static IPv4 (10.100.10.71/24). There is no gateway defined on this networkI have setup the OpenVPN server and set the following
IPv4 Local Network/s: 192.168.2.0/24,10.100.10.0/24
I have also added the following rules on the PRV5 interface (if i remove the 10.0.8.0/24 rule i can't ping 10.100.10.70 either):
ID Proto Source Port Destination Port Gateway Queue Schedule Description
IPv4 * 10.100.10.0/24 * * * * none Local Network passthrough
IPv4 * 10.0.8.0/24 * * * * none VPN Network passthroughI know the routes are okay at least on the client side, because once i connect from my windows box i have the following entries from "route print" command (note 192.168.2.0 255.255.255.0 and 10.100.10.0 255.255.255.0 ):
IPv4 Route Table
Active Routes:
Network Destination Netmask Gateway Interface Metric
0.0.0.0 0.0.0.0 192.168.10.1 192.168.10.108 10
10.0.8.1 255.255.255.255 10.0.8.5 10.0.8.6 30
10.0.8.4 255.255.255.252 On-link 10.0.8.6 286
10.0.8.6 255.255.255.255 On-link 10.0.8.6 286
10.0.8.7 255.255.255.255 On-link 10.0.8.6 286
10.100.10.0 255.255.255.0 10.0.8.5 10.0.8.6 30
127.0.0.0 255.0.0.0 On-link 127.0.0.1 306
127.0.0.1 255.255.255.255 On-link 127.0.0.1 306
127.255.255.255 255.255.255.255 On-link 127.0.0.1 306
192.168.2.0 255.255.255.0 10.0.8.5 10.0.8.6 30
192.168.10.0 255.255.255.0 On-link 192.168.10.108 266
192.168.10.108 255.255.255.255 On-link 192.168.10.108 266
192.168.10.255 255.255.255.255 On-link 192.168.10.108 266
192.168.56.0 255.255.255.0 On-link 192.168.56.1 276
192.168.56.1 255.255.255.255 On-link 192.168.56.1 276
192.168.56.255 255.255.255.255 On-link 192.168.56.1 276
224.0.0.0 240.0.0.0 On-link 127.0.0.1 306
224.0.0.0 240.0.0.0 On-link 192.168.10.108 266
224.0.0.0 240.0.0.0 On-link 192.168.56.1 276
224.0.0.0 240.0.0.0 On-link 10.0.8.6 286
255.255.255.255 255.255.255.255 On-link 127.0.0.1 306
255.255.255.255 255.255.255.255 On-link 192.168.10.108 266
255.255.255.255 255.255.255.255 On-link 192.168.56.1 276
255.255.255.255 255.255.255.255 On-link 10.0.8.6 286I am at a loss on what might be causing this issue, any suggestions are greatly appreciated.
thank you !
-
Hi,
I have also added the following rules on the PRV5 interface
you have to put the rule allowing traffic from OpenVPN to OpenVPN interface.