<![CDATA[IPSec -> How to push multiple routes?]]>Hi there,

I have set up IPSEC and can connect from my Ubuntu laptops using the strongswan network-manager plugin. We have several networks on the pfsense box and would like to route to the lan and the dmz network. How can we enable automatic routing of dmz traffic on the client/? Lan is 192.168.40.0/24 DMZ 192.168.50.0. Should this just occurr naturally when the option "Provide a list of accessible networks to clients" is checked under "Mobile Clients"?

Should I make changes on the server or the client?

thanks

]]>https://forum.netgate.com/topic/110250/ipsec-how-to-push-multiple-routesRSS for NodeTue, 06 Oct 2026 16:00:14 GMTSat, 14 Jan 2017 10:40:47 GMT60<![CDATA[Reply to IPSec -> How to push multiple routes? on Sat, 21 Jan 2017 16:58:14 GMT]]>To answer (some of) my own questions:

I chose a reboot https://forum.pfsense.org/index.php?topic=124304.0

]]>https://forum.netgate.com/post/674388https://forum.netgate.com/post/674388Sat, 21 Jan 2017 16:58:14 GMT<![CDATA[Reply to IPSec -> How to push multiple routes? on Sat, 21 Jan 2017 12:05:54 GMT]]>Is this Site-to-Site? or mobile client?

Also did you add any firewall rules?

Finally, is it necessary to stop/restart IPsec service?

Sounds like it could be similar to my situation, but I'm using Site-to-Site.

Many thanks

]]>https://forum.netgate.com/post/674339https://forum.netgate.com/post/674339Sat, 21 Jan 2017 12:05:54 GMT<![CDATA[Reply to IPSec -> How to push multiple routes? on Sat, 14 Jan 2017 12:22:11 GMT]]>Ok figured it out -> I just needed to add another phase 2 setting for the DMZ on the IPSEC configuration page. Hope this helps someone else. Probably obvious to others.

]]>https://forum.netgate.com/post/672626https://forum.netgate.com/post/672626Sat, 14 Jan 2017 12:22:11 GMT