Site-2-site routing problem?



  • dear community,

    i´ve got a site2site openvpn with 2 pfsense-boxes running.

    Site1 Office:

    local-lan: 192.168.4.x
    pfsense: 192.168.4.1
    WAN: 192.168.178.1 (DSL)

    Site 2 Remote-Server-Network:
    local-lan: 192.168.77.x
    pfsense: 192.168.77.254

    Clients from office-lan can connect to servers in Site 2 without problems.
    Servers in Site 2 can connect to pfsense local-lan-address (192.168.4.1) on Site 1.
    Servers in Site 2 cannot connect to printers / clients on Site 1 (192.168.4.99).

    traceroute from site 2 (server-network):

    C:\>tracert -d 192.168.4.1
    Routenverfolgung zu 192.168.4.1 über maximal 30 Abschnitte
    
      1    <1 ms    <1 ms    <1 ms  192.168.77.254
      2    26 ms    25 ms    25 ms  192.168.4.1
    
    Ablaufverfolgung beendet.
    
    C:\>tracert -d 192.168.4.99
    
    Routenverfolgung zu 192.168.4.99 über maximal 30 Abschnitte
    
      1    <1 ms    <1 ms    <1 ms  192.168.77.254
      2    26 ms    26 ms    25 ms  [b]192.168.178.1[/b]
      3    40 ms    39 ms    40 ms  217.0.117.216
      4  ^C
    
    

    if the routing table knows, how to connect to 192.168.4.1, why am i not able to connect to a printer on the same-network interface with ip: 192.168.4.99? (gateway is set correctly to 192.168.4.1 on printer)

    thanks, best regards, kallegr



  • Do you have a firewall rule under OpenVPN in both pfSense boxes allowing all?



  • @divsys:

    Do you have a firewall rule under OpenVPN in both pfSense boxes allowing all?

    yes! on both pfsense-boxes are * * * (allow all) rules.

    ping to 192.168.4.1 (from server-lan) does work..
    ping to 192.168.4.99 (form server-lan) does not work…


  • Rebel Alliance Global Moderator

    well from that trace looks like pfsense is sending it out its wan vs going down the tunnel.



  • well from that trace looks like pfsense is sending it out its wan vs going down the tunnel.

    Hmmmmmm

    OP: Can you post your OpenVPN configs for the Server and the Client?