OpenVPN and Multi-WAN

  • Dear All,

    For years, I am using 2 CARP routers (currently pfSense 2.4.1) in two locations connected via OpenVPN. Both sets of routers have 2 WANs. Ideally, I would like to use OSPF in a setting like it is described in the book ( However, I am unable to implement that so far.

    As no one responded to my post unter routing and multi WAN last year (, I am trying again here.

    The LAN (virtual) IPs to be connected are <-> The devices have LAN IPs,, and respectively.

    Normally (working for years), I am using no OSPF routing, and OpenVPN config with "IPv3 Remote Network(s)" filled in, tunnel networks and for the two connections and a net30 topology.

    Then, the routing table does contain (on one side, the other one being similar):  UGS  … ... ovpns3        link#16          UHS  ... ... lo        link#16          UH    ... ... ovpns3        link#17          UHS  ... ... lo        link#17          UH    ... ... ovpns4

    All hosts in and do see each other.

    Alternatively with OSPF based on package FRR 0.0.3, deleted "IPv4 Remote network(s)"in OpenVPN config, I assume that "IPv4 Local network(s)" on the server side can stay, I enabled OSPF and cleared states after making the change.

    Then, each router can ping each host at the other end without issues. However, hosts on the one side can - unlike the routers themselves - no longer ping hosts on the other side.

    FRR/OSPF status does show:

    OPSF Neighbors
    Neighbor ID    Pri State          Dead Time Address        Interface            RXmtL RqstL DBsmL    1 Full/DROther      38.242s    ovpns3:      0    0    0    1 Full/DROther      38.416s    ovpns4:      0    0    0
    OPSF Routes
    ============ OSPF network routing table ============
    N        [10] area:
                              directly attached to lagg0
    N      [20] area:
                              via, ovpns3

    ============ OSPF router routing table =============

    ============ OSPF external routing table ===========

    The routing table contains (almost identical, just flag UG1 instead of UGS in first line):  UG1  … ... ovpns3        link#16          UHS  ... ... lo        link#16          UH    ... ... ovpns3        link#17          UHS  ... ... lo        link#17          UH    ... ... ovpns4

    Can someone please point me to how to enable full connectivity again (i.e., each host in should see each host in and vice versa)?


    Michael Schefczyk

Log in to reply