Ipsec clients x openvpn clients communication

[diegoavelinogomes]

Hello for all

I have a Firewall called "A" that connects to Firewall called "B" through an IPSEC Tunnel.

I also have some clients that connect to Firewall "B" using OpenVPN.

I need to allow the clients that are behind Firewall "A" (which has an IPSEC with Firewall "B") to communicate with the clients that are connected to OpenVPN on site "B".

I've been racking my brains for a week and I can't do it.

Thanks!

[viragomann]

@diegoavelinogomes
You need to add an IPSec phase 2 for the OpenVPN tunnel network:
A:
local: A clients subnet
remote: OpenVPN tunnel subnet
B:
local: OpenVPN tunnel subnet
remote: A clients subnet

In the OpenVPN access server settings you have to add the "A clients subnet" to the "Local networks".

However, OpenVPN clients might block access from the remote site by their own firewalls by default. You will have to configure their firewalls accordingly.
Possibly masquerading the source IP with the OpenVPN interface IP can circumvent firewall restrictions.