OPNsense Forum

English Forums => Virtual private networks => Topic started by: Coldwater99 on September 07, 2023, 06:15:11 PM

Title: Not seeing my LAN devices when using OpenVPN
Post by: Coldwater99 on September 07, 2023, 06:15:11 PM
Hello,
I'm not too familiar with networking and whatnot.
I've successfully set up OpenVPN on my Opnsense router I am able to log in remotely from my laptop. 
But I am not able to see my LAN devices. My VPN ip is 10.10.0.0/24, and my LAN is 192.168.x.x,

If someone could point me in the right direction I'll be grateful.
Thank you
Title: Re: Not seeing my LAN devices when using OpenVPN
Post by: Saarbremer on September 07, 2023, 09:57:21 PM
Did you check the firewall rules for the OpenVPN interface? Do you allow traffic to your LAN?

Title: Re: Not seeing my LAN devices when using OpenVPN
Post by: Coldwater99 on September 07, 2023, 11:38:27 PM
Since I'm a total newbie,

I'm not sure how to do that. Could you tell me how, or point me to a guide?
Title: Re: Not seeing my LAN devices when using OpenVPN
Post by: Saarbremer on September 08, 2023, 09:57:16 AM
Regarding OpenVPN you need at least two rules:

1. Allow all incoming IPv4/v6 traffic on UDP 1194 on interface WAN
You find that in Firewall -> Rules -> WAN and can add it if not available.

I guess it is already there. You need that in order to connect.

2. Allow traffic (as needed) on interface OpenVPN
You find that in Firewall -> Rules -> OpenVPN and can add it if not available.

Probably that is missing. Add a new rule: IPv4/IPv6 any protocol, source is the OpenVPN Network and target is your LAN or all (depending on what you want to allow).
Title: Re: Not seeing my LAN devices when using OpenVPN
Post by: tiermutter on September 08, 2023, 12:22:57 PM
What do you mean with "cannot see"?
Are they not reachable / pingable?

When using tools like some network scanners or something, it is possible that those tools will not check VPN / LAN networks, staying in the local network only.
Title: Re: Not seeing my LAN devices when using OpenVPN
Post by: meschmesch on September 19, 2023, 07:22:19 PM
Perhaps add ip4v route 192.168.0.0/16 to your server?