OPNsense Forum

English Forums => Tutorials and FAQs => Topic started by: wacki4 on December 27, 2019, 04:07:08 pm

Title: [OpenVPN] Site-to-Site tunnel problem
Post by: wacki4 on December 27, 2019, 04:07:08 pm

Hi everyone!

I have some problem with OpenVPN site-to-site tunnel.

We have on both networks OpnSense:

Site A:
Router 192.168.0.1 - with set network routing to 10.0.0.0/16 through 192.168.0.16
OPNSense 192.168.0.16 - with openvpn client to Site B

Site B:
OPNSense as router - 10.0.0.1 - connected and being router to network 10.0.0.0/16, also with openvpn server

Connection between both is established. From Site A, we can connect to all machines on Site B without any problem.

Now, we would like to have also connection from machines in Site B to Site A. I've added 'remote networks' on OpenVPN server, set correct client override to route network from this host.

And now - We can ping from each machine in Site B (also from OPNSense) 192.168.0.16 (local address of opnsense in site A), but traceroute don't work. Also, we cannot ping any other address or traceroute in Site A.

I've checked package capture on site A. From example it shows:

Code: [Select]

19 2.523563 10.11.10.1 192.168.0.10 ICMP 88 Echo (ping) request  id=0x3b0b, seq=1/256, ttl=64 (no response found!)
When trying to ping from 10.0.0.10 to 192.168.0.10. Address 10.11.10.1 is OpenVPN server address.

Whan can i be missing, or where to try to diagnose what is lacking in configuration?