jwmhosting
I have a VPN server sitting on a LAN with several computers. I have one offsite VPN client. From the VPN client, I was initially unable to ping the LAN IP addresses of any of the LAN clients other than the VPN server itself. When I temporarily turn off the firewall on one of the LAN clients, I can successfully ping that box from the VPN client. So I'm pretty sure that the Windows firewall on the LAN machine is somehow blocking traffic originating on the VPN.
With the firewall active, I can ping the LAN clients (192.168.0.0/24) with no problem from the VPN Server/gateway machine (192.168.0.203). But when the ping comes from the VPN client (10.7.0.2) --> VPN Server (10.7.0.1) through the same LAN box to this LAN client, it is blocked. I'm really confused here. How does a ping on a LAN IP address differ (as far as the firewall is concerned) other than the source IP. The VPN traffic once it gets on the LAN is no longer tunneled. So I'm thinking that UDP 1194 is not involved on the LAN client machines, correct? So what do I need to open up on the Windows firewall on the LAN client boxes to allow traffic to flow to them from the VPN client? Or is the Windows firewall somehow configured to block inbound from certain subnets?
I can leave the firewalls down and everything works. But I'm not thrilled with that solution. I need to get the firewalls back on, but with allowing VPN traffic flow.
Can someone explain what needs to get opened up in the firewalls?
Thanks.
