Messages

Thanks everyone!!
I set up a VPN
I should have thought of that

A client specific override is mandatory for a site to site OpenVPN to work if the tunnel network is bigger than a /30.

Thank you!!

Could this be the problem?

I don't understand how it works and how it is connected
Common name - test-client

Sent several times by mistake

Maybe this one: https://forum.opnsense.org/index.php?action=dlattach;attach=44279;image

The problem is that the server can't ping the client's network. The client pings without problems

Maybe this one: https://forum.opnsense.org/index.php?action=dlattach;attach=44279;image

I had it by default. I indicated it on the first screenshot.

No restrictions

https://forum.opnsense.org/index.php?action=dlattach;attach=44280;image
?

The photo is small, you can't see anything

No restrictions
It still only works one way

On the OpenVPN interface you have to open the source for the remote sites LAN.

It's not quite clear. Go to Interfaces - Port assignment - Add the created VPN as an interface?
In the rules - Assignment specify LAN

Can you show me your configuration?
Maybe I made a mistake somewhere

Attached

Looks like it's not a configuration error
Check firewalls on all devices

Help with firewall settings. I don't quite understand either.

The settings are the same on both OPNSense

Please help me in solving the problem.
There is a network shown in the attached diagram.
There are three OPNsense routers in it.
There is an OpenVPN tunnel (172.16.1.0/24) between routers site1-gw and site2-gw, and the same tunnel between routers site1-gw and site3-gw (172.16.2.0/24).
What should I configure so that the computer in Site 2 can access the computer in Site 3 and vice versa?
At the same time we can't set up another VPN tunnel between Site2 and Site3 for administrative reasons.

Can you show me your configuration?
Maybe I made a mistake somewhere

Help. I can't figure out what the problem is!

VPN tunnel 10.0.2.0 is set up. I can ping Serv4 from Serv3, but not vice versa



traceroute to 192.168.5.11 (192.168.5.11), 30 hops max, 60 byte packets
1  _gateway (192.168.7.1)  1.011 ms  0.936 ms  0.912 ms
2  10.0.2.1 (10.0.2.1)  2.844 ms  2.855 ms  2.809 ms
3  192.168.5.11 (192.168.5.11)  3.948 ms  4.044 ms  3.998 ms


traceroute to 192.168.7.11 (192.168.7.11), 30 hops max, 60 byte packets
1  _gateway (192.168.5.1)  1.093 ms  1.036 ms  1.012 ms
2  * * *
3  * * *
4  * * *
5  * * *
6  * * *
7  *^C

I did everything according to the instructions but it only works in one direction.
https://docs.opnsense.org/manual/how-tos/sslvpn_instance_s2s.html