Can't connect to one specific host from VLAN or OpenVPN

[baxit]

Greetings

I hope someone can give me some suggestions on how to solve this problem.

I have a server that resides on 192.168.0.110. I know it's a Linux Samba/MySQL server. It's owned by a vendor and that's all I know about it. We have no problems accessing it from the 192.168.0.0/24 network locally. We're unable to access the shares from any VLAN's locally. We can access all other servers on 192.168.0.0/24 from VLANs but not the 192.168.0.110. The vendor has assured us there's no firewall rules blocking out access.

I now have a remote user that needs to access an SMB share on that server. There's an OpenVPN instance running on the Opnsense router for the user connect to. The remote user can access any SMB server on the 192.168.0.0/24 network except for the one on 192.168.0.110.

In the past we've used a Synology NAS that resides on the 192.168.0.0/24 network with OpenVPN. If the user connects to it, the share on 192.168.0.110 can be accessed.

My networking skills aren't enough to figure this out on my own. I've researched and read a lot of material with no solution.

I hope I've given enough information that someone might be able to give me a suggestion or two about what I should look at to fix this issue.

Best Regard,
jharris

[dseven]

It sounds like the Linux server doesn't have a default route (nor any more specific route to your VLANs and OpenVPN space) pointing to your OPNsense firewall. Do you have access to configure this Linux server?

[cookiemonster]

Quite possibly the CIFS/SAMBA configuration needs adjusting to allow connections outsite its own network.

[baxit]

Thank you both for responding. Unfortunately, we don't have access to the Samba server. I'm guessing there's a SAMBA configuration causing the issue as well.

I hoped there might be a way to route traffic from the VPN network (10.10.9.0) to the default LAN (192.168.0.0). Any traffic on the default LAN works fine. I'm more of an application developer than a networking guru. I'm learning but I'm not there yet.

We want to move the Synology NAS to a branch office for local backups but we need to get the one remove user access to that specific server before we do. I can create a virtual machine and run OpenVPN on it but I would rather use the Opnsense router if possible.

[Patrick M. Hausen]

You could use outbound NAT on the LAN interface from the OpenVPN network to the Samba server.

[baxit]

Thank you Patrick. I'll research that today and see if I can get it to work.

[baxit]

I would like to thank everyone who offered suggestions again. We appreciate you all! (Out IT Tech and myself)

Patrick, that seems to be the solution to our specific dilemma. It appears to be working with OpenVPN and we're preparing the VLANs for testing. Once again we can't thank you all enough.

Best Regards,

JHarris