OpenVPN Bridge on pfsense: once LAN pings clients, connectivity breaks

Posted by Lucas Kauffman on Server Fault See other posts from Server Fault or by Lucas Kauffman
Published on 2013-11-04T15:35:46Z Indexed on 2013/11/04 15:56 UTC
Read the original article Hit count: 355

Filed under:
|

So I'm using a pfsense openvpn to bridge my LAN segment so VPN users can access the servers.

The problem I'm having now is that I can establish a connection, I can ping the LAN server from the VPN, but as soon as I ping the client from the LAN server, there is no connectivity anymore between both parties.

So:

connect from the VPN client to the LAN => works ping the LAN from the VPN client => works access server from the VPN (ssh, ftp,...) => works ping client from server => doesn't work ping LAN from the VPN client => doesn't work anymore My bridge has em1 and ovpns1 bridged. I noted with tcpdump that ICMP is reaching the bridge between LAN and the VPN segment. But it's not put onto the em1 interface for some reason.

My pfsense is running on an ESXi host with th vSwitch port enabled in promiscious mode. Firewall rules allow in and outbound traffic regardless origin or destination.

© Server Fault or respective owner

Related posts about openvpn

Related posts about pfsense