pfSense Gold Subscription

Author Topic: open vpn acess in local lan  (Read 1707 times)

0 Members and 1 Guest are viewing this topic.

Offline bmironb

  • Full Member
  • ***
  • Posts: 129
    • View Profile
open vpn acess in local lan
« on: June 25, 2012, 04:49:21 am »
Hi,

  I started open vpn service in pfsense 2.0.1, it's working, i mean i can connect to it from outside on wan.Instructions from here:http://www.youtube.com/watch?v=odjviG-KDq8
  Where i'm confused: open vpn it's not working like pptp vpn ? i mean when i'm connected to pptp vpn i have acess in lan pc's from pptp server pfsense, in open vpn it's not like that ? it's only a secure connections between users ? without lan clients on server ?
  Another thing with pptp vpn i when i'm connected as client i have ext ip from isp on it, with open vpn not :(...thing tried from outside pfsense.

Thanks !
 

Offline heper

  • Hero Member
  • *****
  • Posts: 672
    • View Profile
Re: open vpn acess in local lan
« Reply #1 on: June 25, 2012, 10:45:12 am »
with the correct firewall rules & correct openvpn routes (local network / remote network), you should be able to connect to lan-devices

Offline johnpoz

  • Hero Member
  • *****
  • Posts: 2889
    • View Profile
Re: open vpn acess in local lan
« Reply #2 on: June 25, 2012, 02:01:13 pm »
I connect to lan devices from my road warrior openvpn connection pretty much every day.  

Here is ping to lan client from my vpn, traceroute.

D:\>ping 192.168.1.7

Pinging 192.168.1.7 with 32 bytes of data:

Reply from 192.168.1.7: bytes=32 time=143ms TTL=63
Reply from 192.168.1.7: bytes=32 time=142ms TTL=63

D:\>tracert 192.168.1.7

Tracing route to ubuntu.local.lan [192.168.1.7]
over a maximum of 30 hops:

  1   146 ms   141 ms   144 ms  10.0.200.1
  2   147 ms   146 ms   144 ms  ubuntu.local.lan [192.168.1.7]

Trace complete.

D:\>ipconfig
Windows IP Configuration

Ethernet adapter ovpn:
        Connection-specific DNS Suffix  . : local.lan
        IP Address. . . . . . . . . . . . : 10.0.200.6
        Subnet Mask . . . . . . . . . . . : 255.255.255.252
        Default Gateway . . . . . . . . . :

Check your rules and that your sending the route to your openvpn clients, and that they are getting and using them.

edit: ping times suck because I have to bounce off the proxy here at work to get out to the net and its located in Jax, FL ;)

« Last Edit: June 25, 2012, 02:03:10 pm by johnpoz »
- An intelligent man is sometimes forced to be drunk to spend time with his fools.
- Have I helped you, want to say thanks?  Donate to pfsense the cost of a beer http://pfsense.org/donate.html

Offline nutt318

  • Full Member
  • ***
  • Posts: 118
    • View Profile
Re: open vpn acess in local lan
« Reply #3 on: June 28, 2012, 03:04:12 pm »
Check your rules and that your sending the route to your openvpn clients, and that they are getting and using them.

I'm having the sames issues as the above user, so my firewall rules look ok. Should I add a route somewhere to tell my 192.168.2.0 openvpn get to my 192.168.1.0 LAN?
« Last Edit: June 28, 2012, 03:06:43 pm by nutt318 »

Offline moh10ly

  • Jr. Member
  • **
  • Posts: 70
  • M
    • View Profile
Re: open vpn acess in local lan
« Reply #4 on: July 06, 2012, 04:31:06 am »
that's weird, I have the same issue as well! I allowed all the rules and I can ping to the internal IP of Pfsense but to none of the other internal machines.
anyone solved this already?
Power is Knowledge.

Offline marvosa

  • Sr. Member
  • ****
  • Posts: 338
    • View Profile
Re: open vpn acess in local lan
« Reply #5 on: July 07, 2012, 09:32:07 am »
Post your tunnel settings and the firewall rules on your openvpn tab.