Routing in context of a VPN



  • Hello forum,
    I'm new to pfsense (but have some experiences in the linux world) and want to set up a pfsense router that should serve a s a VPN gateway to Predator. I managed to set boa small machine with 2 NIC for WAN and LAN behind my actual router (that I have to keep for some other reason) and it works fine in its basic configuration. The 1st route has the IP 192.168.178.1. The PFSense WAN NIC has the IP 192.168.178.199 and the LAN NIC operates a DHCP server at IP 192.168.1.1. Everything runs smoothly.
    I also manged to set up an Open VPN client profile and the OpenVPN connects fine. As soon as the VPN connection has been established some new routes are pushed to my machine as expected.
    The output of netstat -nrfinet then reads:

    Internet:
    Destination        Gateway            Flags      Netif Expire
    0.0.0.0/1          46.246.61.1        UGS      ovpnc1
    default            192.168.178.1      UGS        re1
    46.246.61.0/24    46.246.61.55      UGS      ovpnc1
    46.246.61.1        link#7            UH      ovpnc1
    46.246.61.2/32    192.168.178.1      UGS        re1
    46.246.61.55      link#7            UHS        lo0
    127.0.0.1          link#6            UH          lo0
    128.0.0.0/1        46.246.61.1        UGS      ovpnc1
    192.168.1.0/24    link#1            U          re0
    192.168.1.1        link#1            UHS        lo0
    192.168.178.0/24  link#2            U          re1
    192.168.178.199    link#2            UHS        lo0

    As far as I can see it, everything is looking alright. Also, the OpenVPN log does not contain any errors (except the hint that the add route command failed which is obviously not the case).
    However, as soon as the VPN connection has been established, there is no more WAN connectivity for clients on the LAN interface of pfsense. Pinging any host in the internet fails.
    I'm really confused as all the settings are looking fine but there is simply no connectivity as soon as the VPN is connected.

    Does anybody here have any idea on where to start debugging?
    Thanks a lot in advance
    Norbert



  • In the meantime I fixed this issue. I had to set up NAT for the OpenVPN interface. In case anybody experiences the same issue: I used the latter description in this guide: https://chubbable.com/setup-pfsense-as-openvpn-client

    Have a nice weekend!


Log in to reply