VPN Routing issue

[robandyuk]

Hi
I have I think a routing issue that I could do with some help on.
I have two pfsenses one in site A (10.0.0.0/24) and one in site B (192.168.1.10) I have a site to site VPN that works great, users in site B can access the mail server in site A whilst on site.

I have also set up an open VPN server on site B ( clients get 10.0.8.0/24) so clients can work from home and VPN in and get to site B's server 192.168.1.10, this also works ok

Problem is when the users VPN in they cannot access the mail server 10.0.0.3 or anything on the site A lan.

I have put in the client VPN settings  both the local networks  10.0.0.0 and 192.168.1.0
do I need to do anything else

Thanks
Rob

[viragomann]

You have to add the site B client tunnel Network 10.0.8.0/24 to site A site to site settings at Remote Networks to tell it the route for responses.

[Schnyde]

I'd add:

push "route 10.0.0.0 255.255.255.0";

to the OVPN RAS server you have on 192.168.1.10 under Advanced Options / Custom Options in the OVPN settings.  You'd "push" that route to the client, thus forcing that network down the tunnel.

Cheers!