Vpn to certain ip range? is this possible?



  • I'm looking at implementing pfsense on x86 hw in several locations I work with.

    What I would like to know:

    I need to run an ipsec/pptp vpn client on the router that routes all outbound traffic headed to a certain class B network (xxx.xxx.0.0) through the vpn tunnel, but all other traffic through the normal WAN. It would be nice if the tunnel opened and closed itself as needed, but that's not necessary.

    Is this possible/feasible/reasonably straightforward to implement? Also, how would this be affected by a Multi-WAN setup?


  • Rebel Alliance Developer Netgate

    That is how IPsec already works. When you setup the tunnel, you tell it what addresses are on the other side of the tunnel and it will direct them accordingly.

    You can't run a PPTP VPN client on pfSense, so that wouldn't work. OpenVPN would really be preferable, but may not be possible depending on what will be at the far side of the tunnel.

    As for Multi-WAN, that really depends on how you can setup the far side router. If you can supply multiple 'peer' addresses for the tunnel, it may work, but I'm not really all that familiar with Multi-WAN so I can't say for certain.



  • Thank you for answering my question. I am not able to change the far side of the tunnel at all.

    How would I supply multiple 'peer' addresses? would authenticating to the IPSec as a seperate users on each of the WAN's do that?


Log in to reply