Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Site-2-site routing problem?

    Scheduled Pinned Locked Moved OpenVPN
    5 Posts 3 Posters 987 Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • K
      kallegr
      last edited by

      dear community,

      i´ve got a site2site openvpn with 2 pfsense-boxes running.

      Site1 Office:

      local-lan: 192.168.4.x
      pfsense: 192.168.4.1
      WAN: 192.168.178.1 (DSL)

      Site 2 Remote-Server-Network:
      local-lan: 192.168.77.x
      pfsense: 192.168.77.254

      Clients from office-lan can connect to servers in Site 2 without problems.
      Servers in Site 2 can connect to pfsense local-lan-address (192.168.4.1) on Site 1.
      Servers in Site 2 cannot connect to printers / clients on Site 1 (192.168.4.99).

      traceroute from site 2 (server-network):

      C:\>tracert -d 192.168.4.1
      Routenverfolgung zu 192.168.4.1 über maximal 30 Abschnitte
      
        1    <1 ms    <1 ms    <1 ms  192.168.77.254
        2    26 ms    25 ms    25 ms  192.168.4.1
      
      Ablaufverfolgung beendet.
      
      C:\>tracert -d 192.168.4.99
      
      Routenverfolgung zu 192.168.4.99 über maximal 30 Abschnitte
      
        1    <1 ms    <1 ms    <1 ms  192.168.77.254
        2    26 ms    26 ms    25 ms  [b]192.168.178.1[/b]
        3    40 ms    39 ms    40 ms  217.0.117.216
        4  ^C
      
      

      if the routing table knows, how to connect to 192.168.4.1, why am i not able to connect to a printer on the same-network interface with ip: 192.168.4.99? (gateway is set correctly to 192.168.4.1 on printer)

      thanks, best regards, kallegr

      1 Reply Last reply Reply Quote 0
      • D
        divsys
        last edited by

        Do you have a firewall rule under OpenVPN in both pfSense boxes allowing all?

        -jfp

        1 Reply Last reply Reply Quote 0
        • K
          kallegr
          last edited by

          @divsys:

          Do you have a firewall rule under OpenVPN in both pfSense boxes allowing all?

          yes! on both pfsense-boxes are * * * (allow all) rules.

          ping to 192.168.4.1 (from server-lan) does work..
          ping to 192.168.4.99 (form server-lan) does not work…

          1 Reply Last reply Reply Quote 0
          • johnpozJ
            johnpoz LAYER 8 Global Moderator
            last edited by

            well from that trace looks like pfsense is sending it out its wan vs going down the tunnel.

            An intelligent man is sometimes forced to be drunk to spend time with his fools
            If you get confused: Listen to the Music Play
            Please don't Chat/PM me for help, unless mod related
            SG-4860 24.11 | Lab VMs 2.8, 24.11

            1 Reply Last reply Reply Quote 0
            • D
              divsys
              last edited by

              well from that trace looks like pfsense is sending it out its wan vs going down the tunnel.

              Hmmmmmm

              OP: Can you post your OpenVPN configs for the Server and the Client?

              -jfp

              1 Reply Last reply Reply Quote 0
              • First post
                Last post
              Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.