Firewall rules w/mixed interface assignments
-
I've set up a new site-to-site OpenVPN. The client has multiple other site-to-site VPNs, all of which have interface assignments and firewall and NAT rules defined.
I'm attempting to simplify my configuration, and would like to be able to use the "default" OpenVPN interface for rules and NAT.
The only way I'm able to get traffic to pass/route is if I assign an interface to the new VPN, add the allow-all rule on the new firewall rules tab, and an outbound NAT rule.
Based on my reading of the docs, I would expect to be able to mix and match the interface assignments. By that, I mean I would think that using the catch-all OpenVPN interface would work in all cases when a specific interface wasn't defined.
Can anyone confirm the correct behavior? Is it supposed to work like that, or once you define a single OpenVPN interface, you have to define them all?
Thanks.