Enforce Static Tunnel IP for OpenVPN Client in HA Setup
-
Hi everyone,
I'm running into an issue with my current pfSense setup and would appreciate some guidance.
In my setup, I have an OpenVPN server running on a pfSense instance hosted in a data center.
Locally, I have two pfSense firewalls configured in a high availability (HA) setup with state synchronization and CARP.The goal is to route certain policy-based internet traffic from the local network through the OpenVPN tunnel to the data center. This generally works as expected.
However, during a failover to the secondary pfSense, the existing TCP sessions are not maintained. I suspect this is due to the OpenVPN client on the secondary firewall receiving a different tunnel IP address than the primary one.
Is there a way to enforce that the OpenVPN client always receives the same tunnel IP address from the server?
Thanks in advance for any help or suggestions!
Cheers,
Gamie
