having issue migrating OpenVPN Shared Key to SSL/TLS

[comet424]

hi i noticed under my openvpn it was saying shared key is depcriciated... so i tried fixing my
site to site.. i followed a couple videos but i missing something

as i the status page says the site to site is connected... but i no longer can access my other sites network.. lucky i have a back door so i can use openvpn client software to log into the 2nd site to access the pfsense there to make changes

but what is typically the issue? if you need screen shots what do you all need... as i did make a new certificates and a private key so thats setup and site to site can connect together.. but i cant access the other site

so not sure what to fix

[stephenw10]

Commonly it's because there are no iroutes to allow the OpenVPN server to know which subnets exist behind which clients. Those are not required in a shared key setup because it can only ever be point-to-point.

https://docs.netgate.com/pfsense/en/latest/recipes/openvpn-s2s-tls.html#create-client-specific-overrides

Steve