Open VPN Site-to-Ste

akeem1985

Hello all, I am new to this forum and using pfsense. Now that I have gotten that out the way I am having problems with a site-to-site connection which I meet in place. The site-to-site connection established using openvpn Site A is configured as the server Site B is the client. Site B can access all of Site A servers and make calls to site A office using a 4 digit extension.

Moreover, Site A can touch resources on Site B such as printers and computers. However, Site A cannot make calls to Site B using the four digit extension. Can someone help with this?

Please note that two way communication with the phones system worked before the site-to-site vpn was established.

doktornotor

@akeem1985:

Can someone help with this?

Not with this amount of info about the "four digit extension" phone system in place.

akeem1985

Both Sites have its own PBX for telecommunications purposes. It is to my understanding that a layer 2 connection was used to connect both sites and either sites could have contacted each other using a four digit extension. However to reduce cost the layer 2 connection was taken out and pfsense site-to-site openvpn was established. However, site B can contact site A with there four digit extension however site A cannot contact Site B via four digit extension. Moreover Site A can touch the resources in site B such as computers firewall, printers.

phil.davis

If there used to be layer 2 then I guess the subnets are the same at both sites.

Is the OpenVPN site-to-site in tap (bridging) or tun (tunnel) mode?

What are the LAN subnets at each end?

What is the OpenVPN tunnel network?

What do you have in "Local Network/s" and "Remote Network/s" fields OpenVPN settings at each end?

What are the firewall rules on OpenVPN and LAN one each pfSense?

akeem1985

Open VPN is in tunnel mode

Lan subnets are as follows

Site A Server 172.200.3.0/24 (local)
Site B Client 172.200.4.0/24 (Remote)

OpenVPN Tunnel
10.200.10.0/24

On the client it do not provide a field for local just remote and tunnel
OpenVPN Firewall Rules Allow all any destination any port

doktornotor

172.200.x.x is NOT a usable RFC1918 address range. You can use IPs withing 172.16/12, not this.

NetRange:       172.200.0.0 - 172.216.255.255
CIDR:           172.200.0.0/13, 172.208.0.0/13, 172.216.0.0/16
NetName:        AOL-172BLK-2
NetHandle:      NET-172-200-0-0-1
Parent:         NET172 (NET-172-0-0-0-0)
NetType:        Direct Allocation
OriginAS:       
Organization:   AOL Inc. (AOLIN-1)
RegDate:        2002-02-13
Updated:        2014-05-19
Ref:            http://whois.arin.net/rest/net/NET-172-200-0-0-1

akeem1985

Ok I just made changes

Site A 172.16.3.0/24

Site B 172.16.4.0/24

However, I am still unable to make communication via telephone from site A. The network aspect is fine on both sites

marvosa

Assuming there is a straight forward setup at each end, you either have a routing, firewall, NAT, DNS or application (phone system) issue. You've stated that both sides can access each other's resources, so the networking should be in place, but I hate to assume, so we need more details:

Post a network map, so we have a better idea of how things are connected.
Post the server1.conf from server and the client1.conf from the client.
Post a screen shot of the firewall rules from the LAN tab and OpenVPN tab on each end
What kind of phone system is being used and what is it running on?
Are there any blocks in the logs at either end?