<![CDATA[Routing between OpenVPN and External Subnet]]>Current configuration
pfsense @ 10.0.1.1 – 10.0.1.0/24

OpenVPN server on pfsense (tunnel network 10.0.2.0/24)
  route 192.168.1.0 255.255.255.0
  push "route 192.168.1.0 255.255.255.0"

pfsense Opt1 plugged into LAN port of different router @ 192.168.1.1 -- 192.168.1.0/24

pfsense Opt1 has static IPv4 address of 192.168.1.254

OpenVPN interface and Opt1 are bridged

Outbound NAT rule on Interface Opt1 Source being 10.0.2.0/24 Destination being any NAT address is 192.168.1.0/24

I would like to be able to access the 192.168.1.0/24 subnet when connected to the OpenVPN server -- is this possible? What would i need to change in my configuration

]]>https://forum.netgate.com/topic/83162/routing-between-openvpn-and-external-subnetRSS for NodeTue, 10 Mar 2026 13:27:35 GMTWed, 22 Apr 2015 01:49:18 GMT60<![CDATA[Reply to Routing between OpenVPN and External Subnet on Thu, 23 Apr 2015 02:11:39 GMT]]>

Outbound NAT rule on Interface Opt1 Source being 10.0.2.0/24 Destination being any NAT address is 192.168.1.0/24

I just noticed that. You should not need any Outbound NAT going to OPT1. And in any case you should be NATing that to "Interface Address" - forcing the NAT to 192.168.1.0 would break things because that is the base subnet address and likely will not work.

OPT1 is an ordinary LAN-style interface here - do not put any upstream gateway.

]]>https://forum.netgate.com/post/539074https://forum.netgate.com/post/539074Thu, 23 Apr 2015 02:11:39 GMT<![CDATA[Reply to Routing between OpenVPN and External Subnet on Wed, 22 Apr 2015 19:05:41 GMT]]>I appreciate you taking the time to reply!

I've removed the bridge.

Firewall Rules are as follows:
Opt1 PASS – IPv4 Source - any Port - any Destination - any Port - any Gateway - any

OpenVPN Pass - IPv4 Source - any Port - any Destination - any Port - any Gateway - any

Removed the statements from the advanced box and added 192.168.1.0/24 to "Local Network/s"

Still unable to access devices on 192.168.1.0/24

I'm thinking the Outbound NAT rules are incorrect or incomplete

Is it correct to have an IP assigned in 192.168.1.0/24 subnet to OPT1? Should I have an upstream gateway configured for OPT1?

Thanks for the suggestion. I was planning on moving the subnet and all devices on it once I get this configured.

]]>https://forum.netgate.com/post/538941https://forum.netgate.com/post/538941Wed, 22 Apr 2015 19:05:41 GMT<![CDATA[Reply to Routing between OpenVPN and External Subnet on Wed, 22 Apr 2015 02:29:48 GMT]]>No bridging needed - get rid of that.

On the pfSense OpenVPN server put all the local networks in the "Local Network/s" box, like:
10.0.0.0/24,192.168.1.0/24

There is no need to put anything in the advanced box (no "route" or "push…" statements needed - the code underneath does the needed stuff from what is in the Local Network/s box).

Make sure the firewall rules on OpenVPN and OPT1 allow the traffic.

Also, I strongly suggest you use some other subnet than 192.168.1.0/24 - that is so common out in home and cafe-land that you are sure to get conflicts when connecting in from somewhere.

]]>https://forum.netgate.com/post/538605https://forum.netgate.com/post/538605Wed, 22 Apr 2015 02:29:48 GMT