Remote access connect to site to site vpn

[sanchichao]

Hi,

I set 1 HQ and 2 remote sites connected via openvpn site to site. Now I add a openvpn remote access connect to HQ but can't connect to remote sites.I push the route of remote site to remote access, but remote access is a public ip so that I can't  push the route to remote site vpn. Is remote access possible to connect to connect remote site via HQ ?

[marvosa]

This question comes up quite often and has been answered many times.

At a high level:

• In the HQ remote access config, add the LAN subnets for each remote site here -> "IPv4 Local network(s)"

• At each remote site, add the HQ remote access tunnel network here -> "IPv4 Remote network(s)"

The issue is the remote sites do not have a return route for the traffic coming from your remote access tunnel network.  The above steps should get you working.

[sanchichao]

Hi Marvosa,

I know site 2 site must define remote side lan networks, but I'm using public IP(4g) remote access connect to HQ.

[marvosa]

I know site 2 site must define remote side lan networks

Technically this statement is true, but that's not what I said to do.  I said the remote sites need to define the tunnel network of HQ's remote access server

I'm using public IP(4g) remote access connect to HQ

I'm not sure why this matters.  Please provide a network map and elaborate.