Routing Internet Trafic over VPN not working

dieterwolf

Hello all,

given setup:

Multiple Sites - we take Site A here as example:
PfSense Router, mutliple Subnets / VLANs, 10.1.0.0/16
IP of MGMT-Net: 10.1.1.1

Cloud - PfSense Router, multiple Subnets / VLANs, 10.99.0.0/16
IP of MGMT-Net: 10.99.1.1

Site has multiple WAN Uplinks - for every uplink there is one server in Cloud PFS and one Client in Site PFS with a /30 transit network.

Routing is done via BGP => working well.

Ping from Site A to 10.1.1.1 as well as to other sites (B,C,...) possible - BGP Routing working.

Now we want to route whole traffic of Site A (include internet) over Cloud. BGP Route annoncement of 0.0.0.0/0 not possible cause only few sites should do route-all-over-cloud.

I created an Gateway on Site A PFS:
GW2Cloud ==> Interface: MGMT (LAN), Gateway: 10.99.1.1, Monitor: 1.1.1.1, Non-local: Checked

At Cloud PFS: Outbound NAT for Source 10.1.0.0/16 (Site A Nets) on WAN

As soon as i create the Gateway on Site A, i´m not able to ping 10.99.1.1 anymore. Other interfaces in Cloud still pingable (10.99.2.1 e.g.). If i delete the interface it is working again.

Any ideas?

Thanks

dieterwolf

Solution for you guys having the same problem:

Create an Interface on site A for both OVPN-Tunnels. Than assign the automativ created Gateways in the Gateway Group.

Dont forget to do NAT on the Cloud side.