[killmasta93]

i, I was wondering if someone has successfully accomplished site to site as pfSense is running the OpenVPN server and the client DDWRT (R7000 Kongac). I was looking around many guides as most of them show as DDWRT running the server, this is what i got so far see pictures

The idea is i need Site A (pfSense Server) to ping Site B (DDWRT client) because on site B i have NAS which needs to be able to ping one of the servers which is in Site A

Thank you

[killmasta93]

Thanks for the reply so I ended up changing a bit everything i was looking around found on pfSense forums a person who did a script

http://pastebin.com/nzCkm5dL

Then add these rules to the firewall on DDWRT

iptables -I INPUT 2 -p udp --dport 1194 -j ACCEPT
iptables -I FORWARD -i br0 -o tun0 -j ACCEPT
iptables -I FORWARD -i tun0 -o br0 -j ACCEPT

Then on pfSense i see it gets connected which is great

http://imgur.com/a/hwSTn

but i cannot ping on pfsense to DDWRT or vise versa but on status shows this http://imgur.com/FB4DoqW

and changed my pfSense config

http://imgur.com/0b8znzB

Thank you again

[killmasta93]

Thank you for the reply, as you were completely right it was an issue with the CA cert on pfSense. Right now everything seems to be connected correctly whats odd that the night hawk DDWRT can ping pfsense but pfSense cannot ping DDWRT, might that be something with iptables? or does it have to do something with pfSense also?

Thank you

[killmasta93]

So im sorry for being so ignorant as i was stuck on this for a while but finally solved the issue while reading how OpenVPN works,

OpenVPN uses this table



[ 1, 2] [ 5, 6] [ 9, 10] [ 13, 14] [ 17, 18]
[ 21, 22] [ 25, 26] [ 29, 30] [ 33, 34] [ 37, 38]
[ 41, 42] [ 45, 46] [ 49, 50] [ 53, 54] [ 57, 58]
[ 61, 62] [ 65, 66] [ 69, 70] [ 73, 74] [ 77, 78]
[ 81, 82] [ 85, 86] [ 89, 90] [ 93, 94] [ 97, 98]
[101,102] [105,106] [109,110] [113,114] [117,118]


Meaning if my config on OpenVPN server is ifconfig 192.168.90.1 192.168.90.2

so then i needed to give my client overide this, the client gets 192.168.90.5 and the gateway is 192.168.90.6



ifconfig-push 192.168.90.5 192.168.90.6
iroute 192.168.1.0 255.255.255.0


Felt so silly after one week

Now pfSense can ping DDWRT so at the end it was not DDWRT issue

Hope this helps someone else

and thank you again