Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    OpenVPN Tab within the Firewall Rules Page

    Scheduled Pinned Locked Moved 2.0-RC Snapshot Feedback and Problems - RETIRED
    3 Posts 2 Posters 1.3k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • C
      Cino
      last edited by

      I use both Road Warrior and a Site2Site(shared key). When I first create the road warrior setup, an OpenVPN tab is created under the Firewall Rules page. I create the Site2Site setup and no new tab is created under the Firewall Rules page.

      I enable logging under the default allow all rule within the OpenVPN Rules tab. I noticed in the firewall log that this rule tab is used for both my Road Warrior and my Site2Site tunnels. How would I setup rules for each tunnel differently? Would I have to assign ovpns1 and ovpns2 to interfaces under the Interfaces page? And if I do that, would the OpenVPN Rules Tab then be used for both interfaces or would it be unusable?

      For the most part, the Road Warrior will be allowed all but I want to limit the Site2Site access.

      1 Reply Last reply Reply Quote 0
      • jimpJ
        jimp Rebel Alliance Developer Netgate
        last edited by

        If you craft the firewall rules properly (specify the source subnet for each remote network), then you do not need multiple tabs or to assign interfaces.

        You can assign interfaces if you want, but it really isn't necessary if you setup the rules the right way, like so:

        pass * from roadwarrior_subnet to <road warrior="" stuff="">pass * from site2site_subnet to</road>

        Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

        Need help fast? Netgate Global Support!

        Do not Chat/PM for help!

        1 Reply Last reply Reply Quote 0
        • C
          Cino
          last edited by

          I didn't think about…. That should work nicely.. Thanks for your suggestion :-)

          1 Reply Last reply Reply Quote 0
          • First post
            Last post
          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.