Topics

1

Virtual private networks / SSL VPN Road Warrior. Ping Router yes, ping lan NO! [solved!] NO Comodo firewall

« on: January 10, 2021, 09:23:30 pm »

Hello,
Something important is missing in tutorial Setup SSL VPN Road Warrior tutorial - it fails! [SOLVED ANSWER AT BOTTOM!]
As many users i followed Setup SSL VPN Road Warrior tutorial https://docs.opnsense.org/manual/how-tos/sslvpn_client.html
I can connect to OpenVPN, ping router, acces config page but I can't ping or acces inside LAN.
I did all by tutorial several times, and it is not working, something important is missing in tutorial.
There is many videos on Youtube with comments users can't ping or acces inside LAN.
===============
[ Main router ]
[ 10.1.1.1/24 ]
===============

ping 10.10.0.6 NO
ping 10.10.0.1 OK
ping 10.1.1.102 OK
==================                ================= 
[ OpnSense       ]                [ WINDOWS OUT   ]  ping 192.168.1.100 NO
[ 10.1.1.161/24  ]-------WAN------[ 10.1.1.102/24 ]  ping 10.10.0.1 OK  
[ 10.10.0.1/24   ]-------VPN------[ 10.10.0.6/24  ]  ping 192.168.1.1 OK
[ 192.168.1.1/24 ]                =================
================== 
       |
      LAN
       |             
====================  ping 10.10.0.6   NO              
[ WINDOWS IN       ]  ping 10.10.0.1   OK
[ 192.168.1.100/24 ]  ping 192.168.1.1 OK                          
====================  ping google.com  OK  


[SOLVED]
Checking connections by Windows machines gives no pings,
beacause of Comodo Firewall / Windows Defender.

Best check pings between two linux box ON LIVE CD/USB.
===============
[ Main router ]
[ 10.1.1.1/24 ]
===============

ping 10.10.0.6 OK
ping 10.10.0.1 OK
ping 10.1.1.102 OK
==================                ================= 
[ OpnSense       ]                [   LINUX OUT   ]  ping 192.168.1.100 OK
[ 10.1.1.161/24  ]-------WAN------[ 10.1.1.102/24 ]  ping 10.10.0.1 OK  
[ 10.10.0.1/24   ]-------VPN------[ 10.10.0.6/24  ]  ping 192.168.1.1 OK
[ 192.168.1.1/24 ]                =================
================== 
       |
      LAN
       |             
====================  ping 10.10.0.6   OK              
[   LINUX IN       ]  ping 10.10.0.1   OK
[ 192.168.1.100/24 ]  ping 192.168.1.1 OK                          
====================  ping google.com  OK