OpenVPN clients cannot reach hosts through site2site VPN
-
Hello,
I have two pfSense instances connected through a site2site WireGuard tunnel. There are no issues with the tunnel and it is working fine.
However, OpenVPN clients, while able to reach the local part of the network, cannot connect to anything through the WireGuard Tunnel. I checked allowed addresses there and even tinkered with outbound NAT for OpenVPN.
OpenVPN clients are configured with "Redirect Gateway". Traceroute stops at the first hop (which is the OpenVPN gateway address from the server).
I am at a loss...
-
@helge000 Did you add the OpenVPN tunnel network to Wireguards allowed IP's?
-
@jarhead , thanks, I just double checked again: On site B I have the site A openvpn client net allowed in the peer.
In the mean time I did set up an OpenVPN server on site B, put the openvpn client net of it in the WireGuard allowed list of the peer in site A. From Site B's OpenVPN clients, I can connect through the tunnel... site A is not working.