Accessing multiple networks from an Open VPN connection

efe476 · Jun 3, 2014, 12:28 AM

Hi all,

I am trying to figure out where in my configuration I have gone wrong. I am using 2.1.3-RELEASE (i386)

Problem: I am able to ping and access all devices on the 192.168.2.1/24 network, but only 10.100.10.70 on the 10.100.10.71/24 network. I know there are other devices on the 10.100.10.71/24 network because i can ping them using the Diagnostic->ping option and if ssh into pfsense and open up a shell i can also ping the devices for ex: 10.100.10.103.

Here is my setup:

LAN (bridged) -> OPT1, OPT2, OPT4: Static IPv4 with DHCP server running (192.168.2.1/24)
PRV5 (OPT3 originally): Static IPv4 (10.100.10.71/24). There is no gateway defined on this network

I have setup the OpenVPN server and set the following

IPv4 Local Network/s: 192.168.2.0/24,10.100.10.0/24

I have also added the following rules on the PRV5 interface (if i remove the 10.0.8.0/24 rule i can't ping 10.100.10.70 either):

ID Proto Source Port Destination Port Gateway Queue Schedule Description
IPv4 * 10.100.10.0/24 * * * * none Local Network passthrough
IPv4 * 10.0.8.0/24 * * * * none VPN Network passthrough

I know the routes are okay at least on the client side, because once i connect from my windows box i have the following entries from "route print" command (note 192.168.2.0 255.255.255.0 and 10.100.10.0 255.255.255.0 ):

IPv4 Route Table

Active Routes:
Network Destination Netmask Gateway Interface Metric
0.0.0.0 0.0.0.0 192.168.10.1 192.168.10.108 10
10.0.8.1 255.255.255.255 10.0.8.5 10.0.8.6 30
10.0.8.4 255.255.255.252 On-link 10.0.8.6 286
10.0.8.6 255.255.255.255 On-link 10.0.8.6 286
10.0.8.7 255.255.255.255 On-link 10.0.8.6 286
10.100.10.0 255.255.255.0 10.0.8.5 10.0.8.6 30
127.0.0.0 255.0.0.0 On-link 127.0.0.1 306
127.0.0.1 255.255.255.255 On-link 127.0.0.1 306
127.255.255.255 255.255.255.255 On-link 127.0.0.1 306
192.168.2.0 255.255.255.0 10.0.8.5 10.0.8.6 30
192.168.10.0 255.255.255.0 On-link 192.168.10.108 266
192.168.10.108 255.255.255.255 On-link 192.168.10.108 266
192.168.10.255 255.255.255.255 On-link 192.168.10.108 266
192.168.56.0 255.255.255.0 On-link 192.168.56.1 276
192.168.56.1 255.255.255.255 On-link 192.168.56.1 276
192.168.56.255 255.255.255.255 On-link 192.168.56.1 276
224.0.0.0 240.0.0.0 On-link 127.0.0.1 306
224.0.0.0 240.0.0.0 On-link 192.168.10.108 266
224.0.0.0 240.0.0.0 On-link 192.168.56.1 276
224.0.0.0 240.0.0.0 On-link 10.0.8.6 286
255.255.255.255 255.255.255.255 On-link 127.0.0.1 306
255.255.255.255 255.255.255.255 On-link 192.168.10.108 266
255.255.255.255 255.255.255.255 On-link 192.168.56.1 276
255.255.255.255 255.255.255.255 On-link 10.0.8.6 286

I am at a loss on what might be causing this issue, any suggestions are greatly appreciated.

thank you !

viragomann · Jun 11, 2014, 10:28 PM

Hi,

I have also added the following rules on the PRV5 interface

you have to put the rule allowing traffic from OpenVPN to OpenVPN interface.