OPNsense Forum
English Forums => General Discussion => Topic started by: StevenK on May 26, 2017, 08:31:48 pm
-
Hello everyone,
So I got the remote and the laptop to connect. everything is aok to go.
Except I can't see anything on the LAN
Home 192.168.1.xxx
Remote laptop: random
Remote laptop when at home: 192.168.1.xxx
Can someone please help.
Here is the vpn log:
----------------------------------------------------------------------------------------------------
Fri May 26 11:20:28 2017 OpenVPN 2.4.2 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] built on May 11 2017
Fri May 26 11:20:28 2017 Windows version 6.2 (Windows 8 or greater) 64bit
Fri May 26 11:20:28 2017 library versions: OpenSSL 1.0.2k 26 Jan 2017, LZO 2.10
Fri May 26 11:20:38 2017 WARNING: --ns-cert-type is DEPRECATED. Use --remote-cert-tls instead.
Fri May 26 11:20:38 2017 TCP/UDP: Preserving recently used remote address: [AF_INET]74.141.11.135:1194
Fri May 26 11:20:38 2017 UDP link local (bound): [AF_INET][undef]:0
Fri May 26 11:20:38 2017 UDP link remote: [AF_INET]74.141.11.135:1194
Fri May 26 11:20:38 2017 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Fri May 26 11:20:39 2017 [OCI-2F-SSLVPN] Peer Connection Initiated with [AF_INET]74.141.11.135:1194
Fri May 26 11:20:40 2017 open_tun
Fri May 26 11:20:40 2017 TAP-WIN32 device [Ethernet 2] opened: \\.\Global\{5E360F0D-9D60-44D0-B779-4467BDF25878}.tap
Fri May 26 11:20:40 2017 Set TAP-Windows TUN subnet mode network/local/netmask = 10.10.0.0/10.10.0.2/255.255.255.0 [SUCCEEDED]
Fri May 26 11:20:40 2017 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.10.0.2/255.255.255.0 on interface {5E360F0D-9D60-44D0-B779-4467BDF25878} [DHCP-serv: 10.10.0.254, lease-time: 31536000]
Fri May 26 11:20:40 2017 Successful ARP Flush on interface [40] {5E360F0D-9D60-44D0-B779-4467BDF25878}
Fri May 26 11:20:40 2017 do_ifconfig, tt->did_ifconfig_ipv6_setup=0
Fri May 26 11:20:45 2017 Initialization Sequence Completed
---------------------------------------------------------------------------------------------------
-
If you're getting a tunnel established, you need to look at the traffic flow. Do you:
- have a firewall rule to allow the traffic?
- have a route from the source to the destination?
- have a route from the destination back to the source?
- have different three different subnets? (source, tunnel, destination)
192.168.1.0/24 is extremely common, which makes the last requirement a possible culprit.
Bart...