OPNsense
  • Home
  • Help
  • Search
  • Login
  • Register

  • OPNsense Forum »
  • Archive »
  • 18.7 Legacy Series »
  • Connecting Sites via openvpn and policy routing
« previous next »
  • Print
Pages: [1]

Author Topic: Connecting Sites via openvpn and policy routing  (Read 3323 times)

Maarten

  • Jr. Member
  • **
  • Posts: 67
  • Karma: 6
    • View Profile
Connecting Sites via openvpn and policy routing
« on: October 01, 2018, 09:23:53 am »
Hi,

I've got a problem when connecting sites together via policy routing.

I've connected my sites as shown in the attached image, and the problem is I can't ping from "Site B" to "Site C" and visa versa.
The Ping request does reach the host at "Site C", and the ping reply travels back over the tunnel, but "Site A" decides to route the ping reply over the default gateway instead of the tunnel to "Site B". This is the case in both directions. So the policy routing seems to be setup correctly.

What can be the problem here?
Logged

mimugmail

  • Hero Member
  • *****
  • Posts: 6295
  • Karma: 432
    • View Profile
Re: Connecting Sites via openvpn and policy routing
« Reply #1 on: October 01, 2018, 10:05:08 am »
Site A, Interface : WAN ... Check that Upstream is Off or Auto
Logged
Twitter: mimu_muc
WWW: www.routerperformance.net
Support plans: https://www.max-it.de/en/it-services/opnsense/
Commercial Plugins (German): https://opnsense.max-it.de/

Maarten

  • Jr. Member
  • **
  • Posts: 67
  • Karma: 6
    • View Profile
Re: Connecting Sites via openvpn and policy routing
« Reply #2 on: October 01, 2018, 03:48:17 pm »
Hi, thanks for the reply, going to check it out
Logged

Maarten

  • Jr. Member
  • **
  • Posts: 67
  • Karma: 6
    • View Profile
Re: Connecting Sites via openvpn and policy routing
« Reply #3 on: October 03, 2018, 12:34:51 pm »
Problem when I remove the default gateway and set the wan interface upstream to auto is that openvpn does not have a return path, and the log floods with:

openvpn[49033]: write UDPv4: No route to host (code=65)

Logged

mimugmail

  • Hero Member
  • *****
  • Posts: 6295
  • Karma: 432
    • View Profile
Re: Connecting Sites via openvpn and policy routing
« Reply #4 on: October 03, 2018, 03:58:04 pm »
You dont have to remove default gateway, only set upstream to auto ..
Logged
Twitter: mimu_muc
WWW: www.routerperformance.net
Support plans: https://www.max-it.de/en/it-services/opnsense/
Commercial Plugins (German): https://opnsense.max-it.de/

Maarten

  • Jr. Member
  • **
  • Posts: 67
  • Karma: 6
    • View Profile
Re: Connecting Sites via openvpn and policy routing
« Reply #5 on: October 04, 2018, 08:39:18 am »
ah ok, just tried that, but the result remains the same.
Logged

mimugmail

  • Hero Member
  • *****
  • Posts: 6295
  • Karma: 432
    • View Profile
Re: Connecting Sites via openvpn and policy routing
« Reply #6 on: October 04, 2018, 08:43:28 am »
Regarding the speed?
Logged
Twitter: mimu_muc
WWW: www.routerperformance.net
Support plans: https://www.max-it.de/en/it-services/opnsense/
Commercial Plugins (German): https://opnsense.max-it.de/

Maarten

  • Jr. Member
  • **
  • Posts: 67
  • Karma: 6
    • View Profile
Re: Connecting Sites via openvpn and policy routing
« Reply #7 on: October 04, 2018, 08:50:58 am »
no, the ping reply being routed out over the wan adapter. (image of the first post)
Logged

mimugmail

  • Hero Member
  • *****
  • Posts: 6295
  • Karma: 432
    • View Profile
Re: Connecting Sites via openvpn and policy routing
« Reply #8 on: October 04, 2018, 10:40:02 am »
Can you post the routing table and a screenshot of openvpn status, on both all networks should be listed.
Logged
Twitter: mimu_muc
WWW: www.routerperformance.net
Support plans: https://www.max-it.de/en/it-services/opnsense/
Commercial Plugins (German): https://opnsense.max-it.de/

  • Print
Pages: [1]
« previous next »
  • OPNsense Forum »
  • Archive »
  • 18.7 Legacy Series »
  • Connecting Sites via openvpn and policy routing
 

OPNsense is an OSS project © Deciso B.V. 2015 - 2023 All rights reserved
  • SMF 2.0.19 | SMF © 2021, Simple Machines
    Privacy Policy
    | XHTML | RSS | WAP2