Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Vpn to certain ip range? is this possible?

    Problems Installing or Upgrading pfSense Software
    2
    3
    1.6k
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • Z
      z3r0
      last edited by

      I'm looking at implementing pfsense on x86 hw in several locations I work with.

      What I would like to know:

      I need to run an ipsec/pptp vpn client on the router that routes all outbound traffic headed to a certain class B network (xxx.xxx.0.0) through the vpn tunnel, but all other traffic through the normal WAN. It would be nice if the tunnel opened and closed itself as needed, but that's not necessary.

      Is this possible/feasible/reasonably straightforward to implement? Also, how would this be affected by a Multi-WAN setup?

      1 Reply Last reply Reply Quote 0
      • jimpJ
        jimp Rebel Alliance Developer Netgate
        last edited by

        That is how IPsec already works. When you setup the tunnel, you tell it what addresses are on the other side of the tunnel and it will direct them accordingly.

        You can't run a PPTP VPN client on pfSense, so that wouldn't work. OpenVPN would really be preferable, but may not be possible depending on what will be at the far side of the tunnel.

        As for Multi-WAN, that really depends on how you can setup the far side router. If you can supply multiple 'peer' addresses for the tunnel, it may work, but I'm not really all that familiar with Multi-WAN so I can't say for certain.

        Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

        Need help fast? Netgate Global Support!

        Do not Chat/PM for help!

        1 Reply Last reply Reply Quote 0
        • Z
          z3r0
          last edited by

          Thank you for answering my question. I am not able to change the far side of the tunnel at all.

          How would I supply multiple 'peer' addresses? would authenticating to the IPSec as a seperate users on each of the WAN's do that?

          1 Reply Last reply Reply Quote 0
          • First post
            Last post
          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.