Navigation

    Netgate Discussion Forum
    • Register
    • Login
    • Search
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search

    Route specific destination IPs through IPSec VPN

    IPsec
    2
    4
    2462
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • T
      teqqyde last edited by

      Hello,

      tl;dr: is it possible to route a list of ip addresses via an ipsec tunnel?

      Long:
      I installed an pfsense 2.3 and established an ipsec tunnel to the sophos utm on my company site. The tunnel works fine and traffic in the destination networks works also correctly.
      To RDP to our customers we set a NAT on their firewalls

      OUR /27 IPs -> RDP -> Server

      As i used an sophos utm on my site it works pretty fine with an OpenVPN VPN and we routed the customers ip addresses through the tunnel but (espect of our lan) nothing else. Now i like to use pfsense at my site and have to setup a similar solution. Is this possible?

      Regards

      1 Reply Last reply Reply Quote 0
      • Derelict
        Derelict LAYER 8 Netgate last edited by

        Phase 2 traffic selector for each remote /32.

        If the other side was pfSense you could put the whole remote network in and only pass the traffic you want via IPsec firewall rules. Not sure about the Sophos.

        Why not OpenVPN if it works for you?

        Chattanooga, Tennessee, USA
        The pfSense Book is free of charge!
        DO NOT set a source port in a port forward or firewall rule unless you KNOW you need it!
        Do Not Chat For Help! NO_WAN_EGRESS(TM)

        1 Reply Last reply Reply Quote 0
        • T
          teqqyde last edited by

          Thx. Thats a lot to do, but i will give it a try.

          I'm new to pfsense and did not find a tutorial for config the vpn to an sophos utm.

          1 Reply Last reply Reply Quote 0
          • Derelict
            Derelict LAYER 8 Netgate last edited by

            OpenVPN is OpenVPN. You will not find a tutorial for pfSense to every vendor out there. Is there a tutorial on Sophos' site for Sophos to pfSense?

            https://doc.pfsense.org/index.php/OpenVPN_Site_To_Site

            Chattanooga, Tennessee, USA
            The pfSense Book is free of charge!
            DO NOT set a source port in a port forward or firewall rule unless you KNOW you need it!
            Do Not Chat For Help! NO_WAN_EGRESS(TM)

            1 Reply Last reply Reply Quote 0
            • First post
              Last post