Routing Openvpn Client to Site connections over an IPSEC S2S
-
Hello all, I am new to the pfsense community and i have 2 SG-2100's
Site A 10.10.10.0/24 - has a C2S OpenVPN setup using 10.10.50.0/24
|
-=Site to Site IPsec =-
|
Site B 10.10.20.0/24I have the Site 2 Site connections between site A and B and traffic flowing fine. I also have an OpenVPN setup for Client 2 Site connections attached to Site A
what i am trying to figure out is how to allow those Client to Site VPN connection to route over the IPSEC connection to allow communication to Site B
-
Add a phase 2 to the IPSec to connect the site B's LAN with the OpenVPN clients tunnel network.
So on site B you have
local network: 10.10.20.0/24
remote network: 10.10.50.0/24
and on A the other way round.In the OpenVPN access server settings add the site B's LAN to the local networks to push the proper route to the clients.
Ensure that you have firewall rules allowing that access on all involved interfaces.
-
@viragomann Thank you for the quick reply, i have it setup as the following below but appears to still not be working, i did add the Phase 2 entries as you suggested.
-
@viragomann Actually just did a reboot and it appears to be working now, thank you.