Create a test of Site to Site OpenVPN

Networking & Firewalls
1

I’m trying to create a site to site VPN so I can do zfs replication to an offsite FreeNAS server. I want to be able to test the setup before deploying it in a remote location. I have my pfSense router connected to

  1. WAN
  2. Local LAN 192.168.5.0/24
  3. Add LAN to act as WAN for 2nd router 192.168.0.0/24
    The 2nd router will have a LAN of 192.168.1.0/24 with a laptop at 192.168.1.124
    See attached diagram
    I can’t access any websites from the laptop so I can’t test the VPN tunnel. Any ideas on what I’m doing wrong?
    VPN Test
2

My guess would be that you have the two boxes under “Reserved Networks” in the WAN interface settings checked.
https://docs.netgate.com/pfsense/en/latest/firewall/preventing-rfc1918-traffic-from-exiting-a-wan-interface.html

2 Likes
3

MY 1st try would be setting 0.0 to 0.1/24 & rebooting.

HAve you tried replicating the issue in GNS? IF you tracert from PFS to 192.168.5.x , 192.168.0.0 & to 192.168.1.124 aswell as from each device TO PFS, what are the results?

I’d look at your paths, one stays as 5.x , the other goes from 0.x to 1.x .Can 192.168.0.0 (2nd router) ping the internet? If not can it ping the firewall? IF both are a no, change it from 0.0 to 0.1 reboot PFS and the 2nd router + laptop.

4

I don’t think I could have found that on my own. So obvious. Thanks for your help. Love your channel.

1 Like
5

I have no DNS with this setup. Can’t ping www.google.com. I have DNS servers in System/General 8.8.8.8 & 8.8.4.4. DNS resolver is set to ALL interfaces and DNSSEC. I’m stumped.