IKEv2 Client can't access LAN, static route?

mukrik

Hello friends,

Posted on here yesterday unable to access the Internet once connected to VPN and got that issue solved.

Now my issue is I can not ping/access any resources on the LAN that I am accessing via VPN.

My clients receive a virutal ip of xxx.xxx.11.1/24, and my LAN is an xxx.xxx.10.1/24, so I believe this has to do with creating a static route? I am not sure, newbie here still working on getting my box set up in a lab before production.

Any help or suggestions appreciated!

kapara

Provide screenshot. Should be 11.0/24 not 11.1/24

mukrik

That was a typo in my original post, my apologies.

Attached are the screenshots of my ipsec configuration, on the Windows side I followed the windows client instructions with the only notable change being not using the remote gateway to access the internet.

It connects to the VPN fine, but I am not able to ping any network devices, including the pfsense box itself.

![Screen Shot 2016-03-04 at 10.17.51 AM copy.png](/public/imported_attachments/1/Screen Shot 2016-03-04 at 10.17.51 AM copy.png)
![Screen Shot 2016-03-04 at 10.17.51 AM copy.png_thumb](/public/imported_attachments/1/Screen Shot 2016-03-04 at 10.17.51 AM copy.png_thumb)
![Screen Shot 2016-03-04 at 10.19.31 AM.png](/public/imported_attachments/1/Screen Shot 2016-03-04 at 10.19.31 AM.png)
![Screen Shot 2016-03-04 at 10.19.31 AM.png_thumb](/public/imported_attachments/1/Screen Shot 2016-03-04 at 10.19.31 AM.png_thumb)
![Screen Shot 2016-03-04 at 10.18.30 AM.png](/public/imported_attachments/1/Screen Shot 2016-03-04 at 10.18.30 AM.png)
![Screen Shot 2016-03-04 at 10.18.30 AM.png_thumb](/public/imported_attachments/1/Screen Shot 2016-03-04 at 10.18.30 AM.png_thumb)

kapara

Are you using multiple gateways? What do your rules look like on your interfaces? Allow all on each?