Messages

1

Tutorials and FAQs / [OpenVPN] Site-to-Site tunnel problem

« on: December 27, 2019, 04:07:08 pm »

Hi everyone!

I have some problem with OpenVPN site-to-site tunnel.

We have on both networks OpnSense:

Site A:
Router 192.168.0.1 - with set network routing to 10.0.0.0/16 through 192.168.0.16
OPNSense 192.168.0.16 - with openvpn client to Site B

Site B:
OPNSense as router - 10.0.0.1 - connected and being router to network 10.0.0.0/16, also with openvpn server

Connection between both is established. From Site A, we can connect to all machines on Site B without any problem.

Now, we would like to have also connection from machines in Site B to Site A. I've added 'remote networks' on OpenVPN server, set correct client override to route network from this host.

And now - We can ping from each machine in Site B (also from OPNSense) 192.168.0.16 (local address of opnsense in site A), but traceroute don't work. Also, we cannot ping any other address or traceroute in Site A.

I've checked package capture on site A. From example it shows:

Code: [Select]

19 2.523563 10.11.10.1 192.168.0.10 ICMP 88 Echo (ping) request  id=0x3b0b, seq=1/256, ttl=64 (no response found!)
When trying to ping from 10.0.0.10 to 192.168.0.10. Address 10.11.10.1 is OpenVPN server address.

Whan can i be missing, or where to try to diagnose what is lacking in configuration?

2

General Discussion / Site-To-Site OpenVPN problem

« on: November 19, 2018, 01:21:06 pm »

I have current configuration which don't work fully as i planned.

I have OpnSense with OpenVPN server on Site A - subnet 10.0.0.0/16, and also now OpnSense with OpenVPN client on Site B - subnet 10.1.0.0/16.

When i access ip from SiteB to SiteA - everything works fine, without problem.

From SiteA to SiteB - i can connect to 10.1.0.1 (OpnSense server local IP), but I've cannot connect anything inside LAN of SiteB. On OpnSense packet capture when i try to access one of devices, i've get:

Code: [Select]

12:54:14.753146 IP 10.11.10.1.61059 > 10.1.0.2.443: tcp 0
12:54:15.754410 IP 10.11.10.1.61059 > 10.1.0.2.443: tcp 0
12:54:17.758421 IP 10.11.10.1.61059 > 10.1.0.2.443: tcp 0
12:54:21.766253 IP 10.11.10.1.61059 > 10.1.0.2.443: tcp 0
What i could have set wrong? Any ideas?