Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Access OpenVPn Site to Site Network via OpenVPN Client

    Scheduled Pinned Locked Moved OpenVPN
    5 Posts 3 Posters 2.5k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • M
      malt0r
      last edited by

      Hi Everyone,

      i've an routing issue with my pfsense box. I've configurend an OpenVPN server with which i can access my local network and the IPSec sites. So far so good. I also got OpenVPN Site-to-Site Connections with other remote locations. Now my question is: How can I access these remote networks via my OpenVPN Client? Thanks.

      Cheers,
      malt0r

      1 Reply Last reply Reply Quote 0
      • M
        marvosa
        last edited by

        Whatever networks you want your clients to have access to… push that route to your clients via the advanced config.

        e.g. if the remote network is 192.168.100.0/24 use:

        push "route 192.168.100.0 255.255.255.0"

        1 Reply Last reply Reply Quote 0
        • M
          malt0r
          last edited by

          the remote network is 192.168.4.0/24.

          the network between the two OPenVPN sites is 10.104.10.0/24

          I've added 'push "route 192.168.4.0 255.255.255.0";' to my VPN config but i can't access the remote network. Any ideas?

          Cheers,
          malt0r

          1 Reply Last reply Reply Quote 0
          • P
            phil.davis
            last edited by

            Your OpenVPN "road warrior" clients will know how to reach 192.168.4.0/24 - but the router at the other end of the site-to-site link (where 192.168.4.0/24 is) needs to know how to route back. Let's say the whole network chain is:

            (192.168.22.0/24 road warrior OpenVPN) <-> Router A <-> (10.104.10.1 server to 10.104.10.2 client site-to-site OpenVPN) - Router B <-> (192.168.4.0/24 remote network)

            Then the Router A OpenVPN site-to-site server needs:
            push "route 192.168.22.0 255.255.255.0"

            Then Router B will be told the path back to 192.168.22.0/24.

            And always make sure that the firewall rules on OpenVPN are open enough to permit traffic to/from all these subnets.

            As the Greek philosopher Isosceles used to say, "There are 3 sides to every triangle."
            If I helped you, then help someone else - buy someone a gift from the INF catalog http://secure.inf.org/gifts/usd/

            1 Reply Last reply Reply Quote 0
            • M
              malt0r
              last edited by

              thanks that has fixed my problem  :)

              1 Reply Last reply Reply Quote 0
              • First post
                Last post
              Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.