I want to setup a vpn service on top of my PFSense box at home. PFSense is configured and working fine for my home network.
The problem is, that i can only access wan addresses over the vpn tunnel and no device/address in the home lan.
I'vd checked for missing/blocking firewall rules, there is no blocking rule and the firewall logs also dosen't printout any blocked traffic from the affected ips. All traffic that comes over the vpn tunnel has access to 0.0.0.0 /0 that should mean WAN+LAN, right?
If i do a packet capture on the PFSense box and triggering a ping from the vpn client pc, the packet capture outputs:
21:26:10.355756 (authentic,confidential): SPI 0xcd64b046: IP 10.0.40.1 > 10.0.100.1: ICMP echo request, id 1, seq 7219, length 40
Some configuration values below:
Network diagram picture - not embedded due insufficient reputation
PFSense box at home:
MASK: /16 (255.255.0.0)
This box is the main router in the notwork (gateway).
VPN Setup (PFSense box at home):
IPSec - Mobile Clients:
Provide a virtual IP address to clients - Checked
Virtual IP address Pool: 10.0.40.0 / 24
Provide a list of accessible networks - Checked
IPSec - Phase2, local network: 0.0.0.0 /0
Any ideas where the issue could be?