Routing problem when enabling a site to site OpenVPN instance.
Hello. I have 3 sites connected via Site to Site VPN instances, and one user VPN instance. Two of the remote sites connect back to a central pfsense:
I've had to disable the site to site instance for Site2 because when its enabled, when i look at my routing table, it changes the route for the 172.16.100.0/24 (user vpn) to a gateway on Site2's tunnel. I'd rather not have to disable routing configs on the instance and configure static routes on all the pfsenses.
On the main pfsense openvpn server instances I have networks configured in each for the clients to access:
On the user vpn:
192.168.0.0/24 being the lab network 172.16.0.0/24 being the LAN network 172.16.1.0/24 being site 2 network
On the site to site instance for site 2 i specify site2's network to route through the vpn:
NOTE: There is no issue with having the LAB VPN instance on. Everything routes through there as normal.
So why is it when I enable SITE2's vpn tunnel, it messes with the user vpn's gateway?
When the site2 vpn tunnel is down the routing table looks normal:
When the site2 vpn tunnel is enabled here is what the routing table switches the 172.16.100.0/24 network to:
Post the remote access config and the site-to-site config for site 2... both located in /var/etc/openvpn