Opnsense as a vpn client to a synology nas OpenVPN server

Started by Broomstick, July 13, 2025, 08:47:55 PM

Previous topic - Next topic
Hi,

As in the title say, I am trying to link up one of my opnsense instance to my nas openvpn server from synology .
The topology is not subnet.
I have used the same tutorials than to connect to Pia openvpn commercial VPN.

It is connecting. But I can't ping the gateway (so the synology) and can't access any services.

The goal was to make available the synology through the openvpn link for the WebDAV and other services capabilities to the rest of the subnet behind the opnsense instance
Any ideas what could be wrong here ?

Quote from: Broomstick on July 13, 2025, 08:47:55 PMIt is connecting. But I can't ping the gateway (so the synology)
Which IP? The OpenVPN server or its LAN IP?

Show the server and client config.

July 13, 2025, 11:17:48 PM #2 Last Edit: July 13, 2025, 11:25:31 PM by Broomstick
there is no LAN IP.
as I said. The goal is to be able to access synology webdav and other services from the opnsense generated subnet through the openvpn link generated by the synology.
The opnsense which is the endpoint so the client of the synology server can't ping the gateway inside the openvpn tunnel.
And yes the openvpn connection status is "connected".
The PIA connection I used as a test/training is working fine and i can ping the gateway from that openvpn link for example.

Also it is working fine on Linux and windows

Did you assign an interface to the OpenVPN client instance?

Did you switch the outbound NAT to hybrid mode and add a rule to the clients interface?
This is also necessary for PIA, however.

Yes thank you I did all that.

To avoid wasting time for everyone I am going to try with a new instance to see if I missed a step... I am more inclined to think it is a Nat or firewall problem.

Is there any good tutorial up to date with the new interface in mind about it ? So that I can retrace the steps and not miss anything?