Topics

1

17.1 Legacy Series / OpenVPN and firewall rules

« on: April 11, 2017, 02:01:12 pm »

Hi!

I followed the tuto "Setup SSL VPN Road Warrior" successfully except firewall rules.
The VPN network subnet is : 10.10.22.0/24 (set in VPN -> OpenVNP -> Servers -> IPv4 Tunnel Network field : 10.10.22.0/24)
In Firewall -> Rules -> OPENVPN tab, I added a rule to allow connections from VPN clients to the LAN network.

Code: [Select]

Proto Source Port Destination Port Gateway Schedule Description
IPv4 * OpenVPN net * LAN net * * - Allow VPN traffic to LAN This rule don't work (VPN clients couldn't ping LAN clients).
So, I've modified the rule like this :

Code: [Select]

Proto Source Port Destination Port Gateway Schedule Description
IPv4 * 10.10.22.0/24 * LAN net * * - Allow VPN traffic to LAN and this rule work!

My question is : why is "10.10.22.0/24" required instead of "OpenVPN net"?

Thanks