2 parallel firewall, same Lan, VPN on this fw can not ping sever gateway other

Started by huuich, February 07, 2021, 04:45:47 AM

Previous topic - Next topic
I have 2 parallel firewall running lastest version 21.1, same Lan like picture attached



On fw 2 can ping File Sever 1 (gateway firewall 1), on fw 1 can ping File Server 2 (gateway firewall 2)


I've configured VPN on firewall 2 follow step by step this doc: https://docs.opnsense.org/manual/how-tos/sslvpn_client.html And almost everything work ok but on Remote Computer I only can ping File Server 2 (gateway fw 2) and can not not ping File Server 1 (gateway firewall 1) though they are on the same Lan.

How can I do to VPN computer on firewall 2 can ping sever gateway firewall 1?

This looks like an asymmetrical routing issue.
As the VPN client source address is in a different subnet to 192.168.1.0/24, the response packet of the ping will need to use it's assigned gateway, which is 192.168.1.1, which won't know what to do with the source address of 10.10.0.1.