OPNsense Forum

English Forums => General Discussion => Topic started by: Wombat on September 05, 2018, 03:55:19 am

Title: Road Warrior OpenVPN link- possible Routing and DNS issue
Post by: Wombat on September 05, 2018, 03:55:19 am
I have established a OpenVPN server on the OPNSense Router and successfully connected a client (OpenVPN on Android and Viscosity on W10) remotely through to the Router as evident by the client getting a VPN IP address (10.0.2.x).
But I cannot use that connection to connect to any of servers inside my Routers domain (10.0.0.x) for HTML traffic.
Is there something I am missing in the client, or the Router that allows a request from the VPN client be directed through to the servers on the routers Domain (10.0.0.x).

Once I have that basic connectivity working, is there some smart configuration I can set up to direct IP traffic depending on how I am connected to the internet, ie
If connected to my Domain (computer WiFi or Ethernet IP is 10.0.0.x) then requests to 10.0.0.x stay in the Domain, otherwise they are routed out through the gateway to the internet.  {this already works, using unbounded DNS), but
If connected to the internet (computer WiFi or Ethernet IP is not 10.0.0.x), all IP traffic is routed over internet connection except to 10.0.0.x which is routed over VPN connection (with IP of 10.0.2.*) into my Domain.
Thanks in advance
Title: Re: Road Warrior OpenVPN link- possible Routing and DNS issue
Post by: Deku on October 12, 2018, 11:24:25 pm
I had this problem as well.  I fixed it by disabling Unbound DNS and instead using Dnsmasq DNS.  I then specified the IP of the internal network gateway (Opnsense LAN) as the DNS server in the OpenVPN server settings.
Title: Re: Road Warrior OpenVPN link- possible Routing and DNS issue
Post by: Baliste on February 04, 2019, 12:45:33 pm
Hello,

I faced the same kind of problem and I added the OpenVPN tunnel network to the unbound ACL, and it is working now.

Frédéric
Title: Re: Road Warrior OpenVPN link- possible Routing and DNS issue
Post by: Wombat on April 11, 2019, 08:51:17 am
Thanks for your suggestions, tried both but the problem still exist.
I have started another topic on this.