OpenVPN route as a secondary preference

[jamesc]

Hi all,

I'm looking to implement the following but not sure it will possible, im hoping someone can confirm

Pfsense at data centre which is the open VPN server
Static routes on the pfsense to route traffic for 5 different remote subnets to local MPLS router at the datacentre. All this works fine.

I also want to present these 5 subnets as openvpn clients to the openvpn server. The idea is that if one of the MPLS links is down, pfsense will route over the openvpn tunnel instead.

Is this possible at all?

Thank you

James

[jamesc]

80 views and nobody knows the answer, surely somebody can help?  :'(

[marcelloc]

I did it with ipsec, you can try to edit this script to run with openvpn

http://forum.pfsense.org/index.php/topic,42025.msg217019.html#msg217019

[cmb]

You'll need a routing protocol for that to work, and to exchange routes with the MPLS routers (usually via OSPF or BGP).