Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Routing client1 –> VPN1 --> PF1 --> VPN2 --> PF2 --> client2

    Scheduled Pinned Locked Moved Routing and Multi WAN
    4 Posts 2 Posters 2.1k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • T
      tyllee
      last edited by

      I need help with routing:
      client1 (RW1) Net D –> VPN1 Net D --> PF1 --> VPN2 Net E --> PF2 --> client2 Net B

      Info:
      PF1= PfSense 2.0 local net C
      PF2= PfSense 1.2.3  local network B
      RW1= Roadwarrior asigned network A from PS1
      VPN1=OpenVPN multiple clients Net D
      VPN2=OpenVPN site-to-site Net E

      Setup:
      This OpenVPN route all traffic is working:
      RW1 –> VPN1 --> PF1
      client1 (Rw1) can ping local-IF Net C at PF1

      This OpenVPN site-to-site is working:
      PF1 --> VPN2 --> PF2 (Net B)
      client 2 can ping local-IF Net C at PF1

      Question:
      How should I make Client1 (RW1) able to ping Client2?

      Client1 (RW1) –> ping --> Client2?

      Regards,
      Marc

      1 Reply Last reply Reply Quote 0
      • GruensFroeschliG
        GruensFroeschli
        last edited by

        It's simply a matter of setting the correct routes on all the involved devices.

        Make sure the roadwarriors get pushed all the needed routes.
        Make sure the pf2 knows the route to the roadwarrior subnet.

        We do what we must, because we can.

        Asking questions the smart way: http://www.catb.org/esr/faqs/smart-questions.html

        1 Reply Last reply Reply Quote 0
        • T
          tyllee
          last edited by

          Yes, it was simple.

          In PF1 I defined the route
          net B using GW lan-if-PF1

          In PF2 I defined the route
          net D using GW lan-if-PF1

          And in OpenVPN i pushed net B to the clients.

          1 Reply Last reply Reply Quote 0
          • T
            tyllee
            last edited by

            It's not working after an upgrade of PF2 from 1.2.3 to 2.0…

            What am I doing wrong.

            All the settings is the same but PF2 is complaining about my gateway that routes traffic to RW1 that it is on the wrong subnet...

            The settings is exactly the same as in PF2(1.2.3) but now it's not accepting the gateway that I've been using.

            Should I create some kind of VLAN-interface or where is the problem?

            I'm trying to set up the routing from PF2-lan to RW1...

            Settingup gateway in PF2 (2.0)

            Choose which interface this gateway applies to.
            LAN net B

            Name
            Gateway1

            Gateway
            VPN1-lan-if

            Why must VPN1-lan-if be on the same subnet to make PF accept this?

            1 Reply Last reply Reply Quote 0
            • First post
              Last post
            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.