Single WAN, multiple VPN concurrent connections

user_nsk

Hello folks,
May be this question have been already asked, but I ggled it and didn't find my exact case.

Scenario:
1. Multiple LAN-ports router, single WAN port.
2. Two VPN accounts from different VPN providers (VPN1, VPN2)
3. Say, there're LAN_PORT1, and LAN_PORT2, LAN_PORT3

Desired bhvr:
1. VPN1, VPN2 must connect via single WAN port concurrently
2. Clients connected via LAN_PORT1 go through VPN1
3. Clients connected via LAN_PORT2 go through VPN2
4. Clients connected via LAN_PORT3 just pass through directly

Is it possible with pfSense ?

viragomann

You can do this with poilcy routing: https://doc.pfsense.org/index.php/What_is_policy_routing

user_nsk

@viragomann:

You can do this with poilcy routing: https://doc.pfsense.org/index.php/What_is_policy_routing

Thanks, it seems policy routing is for second part of behaviour.
What about running 2 VPN clients concurrently on single WAN, so they not overlapped
In Linux, you can create virtual network interface (veth) and bind VPN client to this virtual NI
So, I wonder if it's possible in pfSense ?

viragomann

Multiple vpn clients are no problem as long as they use different tunnel subnets.
Each client has to be assigned an interface after set it up. Just enable the interface, do no IP settings. Then this interface can be used for policy routing.