Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    2 VPN connections with same subnet/gateway

    Scheduled Pinned Locked Moved Routing and Multi WAN
    1 Posts 1 Posters 169 Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • N
      nEmai
      last edited by

      Hi together,

      I've been using pfSense for quite some time now and recently came upon a problem I don't really know how to tackle best.

      I have 3 gateways let's say.
      WAN1 is my physical WAN interface connected to some FritzBox for Uplink.
      VPN2 is a VPN connection to Germany
      VPN3 is a VPN connection to Japan
      (VPN1 is irrelevant to the problem)

      WAN1 and VPN2 are a fail-over gateway group with VPN2 being Tier1.
      VPN3 mainly just gets some policy based cconnections.

      Thats for the setup. This does work more or less.
      For the problems I experience with OpenVPN in this I might open a separate thread.

      I have a pretty stupid problem here.
      Both VPNs go to the same VPN provider (that uses pretty damn small address pools on their servers, like 10.8.[0-3].[0-7] or something...) and thus chances are high I get both VPN connections on the same subnet. Like one connection getting 10.8.1.3 and the other getting 10.8.1.7. It also already happened that both had the exact same address. Both cases lead to issues in routing, the most obvious and probably least problematic being the gateway monitor doesn't work as expected any more...
      Also it is not exactly a problem of the provider since every connection for itsself is perfectly fine. Just when some crazy person gets the idea to set up multiple VPNs on the same router, this tends to become an issue.

      Until now I would just manually reconnect either of the VPNs until I am on a different "/24".
      Is there a more elegant way to tackle this?
      (Setting static IPs unfortunately won't work...)

      Thanks a lot!

      1 Reply Last reply Reply Quote 0
      • First post
        Last post
      Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.