OpenVPN & IPSec routing

[davedevery]

Hello,

I have 2 sites A & B

There are 2 internet sources at both A & B

Site A
ISP1
ISP2

Site B
ISP3
ISP4

I have site A linked to site B linking ISP1 and ISP3 via IPSEC - All is working well. All traffic is routing over this IPSEC tunnel presently.

I have just linked site A to site B linking ISP2 and ISP4 via OpenVPN - There is one host at Site A that I want to route to Site B over the OpenVPN tunnel, not the IPSec tunnel.

How do I achieve this? Thanks in advance.

[davedevery]

Anyone!?

[viragomann]

You can do this in the OpenVPN setup with "Locale Networks" and "Remote Networks" on server and client site. How exactly, depends on which site is the server and which is the client.
Just enter the one host you want to access.
But if you have also set a route form IPSec for the same destination, I don't know which one has the higher priority.
However, you may also be able to direct the traffic to OpenVPN by policy based routing, after assigning an interface to the VPN instance.

If you just want get access from site A to B, the simplest solution would be to do NAT for this connection at B (by adding an outbound NAT rule).