Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Site-to-site VPN - How to control LAN access on one end

    Scheduled Pinned Locked Moved OpenVPN
    2 Posts 2 Posters 204 Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • C
      cobrahead
      last edited by

      I have a site-to-site VPN (OpenVPN) tunnel connecting two remote locations. Both locations are behind a pfSense box. How do I limit access to the VPN tunnel at one end. ie: I just want IPs 172.16.0.200 - 172.16.0.210 to have access.

      "PERFECTION IS THE ENEMY OF PERFECTLY ADEQUATE."

      1 Reply Last reply Reply Quote 0
      • V
        viragomann
        last edited by

        So you may already have assigned interfaces to the OpenVPN instances on both sides. Deactivate all firewall rules on the OpenVPN tabs if you don't need them for other purposes and add rules to your VPN interfaces with limited access.
        Remember that the OpenVPN tab is handled as an interface group including all OpenVPN instances running on pfSense.
        For the IP range 172.16.0.200 - 172.16.0.210 in your example you can add an alias and use this in the filter rule as source.

        1 Reply Last reply Reply Quote 0
        • First post
          Last post
        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.