Routing problem when enabling a site to site OpenVPN instance.
-
Hello. I have 3 sites connected via Site to Site VPN instances, and one user VPN instance. Two of the remote sites connect back to a central pfsense:
https://imgur.com/a/L8b0Jsn
I've had to disable the site to site instance for Site2 because when its enabled, when i look at my routing table, it changes the route for the 172.16.100.0/24 (user vpn) to a gateway on Site2's tunnel. I'd rather not have to disable routing configs on the instance and configure static routes on all the pfsenses.
On the main pfsense openvpn server instances I have networks configured in each for the clients to access:
On the user vpn:
https://imgur.com/a/7q0j6Fx
192.168.0.0/24 being the lab network 172.16.0.0/24 being the LAN network 172.16.1.0/24 being site 2 network
On the site to site instance for site 2 i specify site2's network to route through the vpn:
https://imgur.com/a/lnPBrTf
NOTE: There is no issue with having the LAB VPN instance on. Everything routes through there as normal.
So why is it when I enable SITE2's vpn tunnel, it messes with the user vpn's gateway?
-
When the site2 vpn tunnel is down the routing table looks normal:
https://imgur.com/a/xTT9IJ8
When the site2 vpn tunnel is enabled here is what the routing table switches the 172.16.100.0/24 network to:
https://imgur.com/a/4lEEyk2
-
Post the remote access config and the site-to-site config for site 2... both located in /var/etc/openvpn