Site to Site OpenVPN Routing
-
Hi, I'm running pfsense 2.0RC1. I have a Site to Site OpenVPN setup. I'm trying to route all traffic from one end of the tunnel through the other end of the tunnel. This way I can control all internet traffic flows from one firewall. If I add a default route and point it to use the gateway of the vpn tunnel shouldn't this route all traffic out the other end? I've tried this and I see the packets arrive at the remote end of the tunnel as expected. However, the packets never get returned. Has anyone done this or can anyone point me in the right direction?
-
The easiest way is on the client to add "redirect-gateway def1;" into the custom options, which will redirect the default gateway over the VPN.
Alternately, if you are on a recent 2.0 snapshot you should also get a dynamic gateway entry under System > Routing for the VPN connection and then you can use policy routing to selectively route traffic from the LAN side over the VPN.
