Roadwarrior routing help



  • Hi, new to pf looking for some guidance, I have the following set up,

    office1 - 10.0.1/24
    office2 - 10.20.1/24
    office1 and office2 site to site is working using 10.0.9/30, i can traverse both ways

    i have just setup a road warrior vpn into office2 using 10.0.8/30 and i can access 10.20.1/24 fine.  what do i need to do to access office1 10.0.1/24 when i am on the vpn?  i have checked the firewall logs and allowed the blocked access but it looks like i'm missing a route configuration somewhere?



  • Without seeing route lists from both machines, it's hard to troubleshoot.  My first guess would be saying "office1" doesn't have a known route to 10.0.8.0/30 is it sends replies to its default route which would be it's WAN port.  Start with that and let us know.



  • @pfnewbie12:

    Hi, new to pf looking for some guidance, I have the following set up,

    office1 - 10.0.1/24
    office2 - 10.20.1/24
    office1 and office2 site to site is working using 10.0.9/30, i can traverse both ways

    i have just setup a road warrior vpn into office2 using 10.0.8/30 and i can access 10.20.1/24 fine.  what do i need to do to access office1 10.0.1/24 when i am on the vpn?  i have checked the firewall logs and allowed the blocked access but it looks like i'm missing a route configuration somewhere?

    just add on the OpenVPN server on office the following command in the advanced options:

    push "route 10.0.1.0 255.255.255.0";
    

    Then the OpenVPN server send a static route to the OpenVPN Client (RoadWarrior).
    But you have to allow the traffic from the OpenVPN RoadWarrior Tunnel network on office2 and office1 - but I am sure you know that.


Log in to reply