Site to Site VPN difficulties using OPNSense and Zerotier

Community Support BSD
1

I have multiple sites I want to connect together in a mesh fashion :

Site 1 : LAN 192.168.1.0/24 ZeroTier IP : 10.254.254.1/24
Site 2 : LAN 192.168.2.0/24 ZeroTier IP : 10.254.254.2/24
Site 3 : LAN 192.168.50.0/24 ZeroTier IP : 10.254.254.50/24
OnRoad Laptop : ZeroTier IP : 10.254.254.254/24

I have created the following firewall rules on the LAN Interface and ZT Interface :

Picture1
Picture11789×1263 325 KB

I can successfully ping :
Laptop (10.254.254.254) >> 192.168.1.1 & 192.168.1.0/24
Laptop (10.254.254.254) >> 192.168.2.1 & 192.168.2.0/24
Laptop (10.254.254.254) >> 192.168.50.1 & 192.168.50.0/24

However, the individual sites cannot communicate with each other :

Client 1 (192.168.1.100) >> ping 192.168.2.1 >> FAIL
Client 2 (192.168.2.100) >> ping 192.168.1.1 >> FAIL

I cannot get Intersite Routing working no matter if I try Windows RRAS / pfSense / OPNSense, however any client connected to the ZT network directly can successfully ping all other networks. Where am I going wrong ?

2

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.