Roadwarrior routing help

pfnewbie12

Hi, new to pf looking for some guidance, I have the following set up,

office1 - 10.0.1/24
office2 - 10.20.1/24
office1 and office2 site to site is working using 10.0.9/30, i can traverse both ways

i have just setup a road warrior vpn into office2 using 10.0.8/30 and i can access 10.20.1/24 fine. what do i need to do to access office1 10.0.1/24 when i am on the vpn? i have checked the firewall logs and allowed the blocked access but it looks like i'm missing a route configuration somewhere?

tbrummell

Without seeing route lists from both machines, it's hard to troubleshoot. My first guess would be saying "office1" doesn't have a known route to 10.0.8.0/30 is it sends replies to its default route which would be it's WAN port. Start with that and let us know.

Nachtfalke

@pfnewbie12:

Hi, new to pf looking for some guidance, I have the following set up,

office1 - 10.0.1/24
office2 - 10.20.1/24
office1 and office2 site to site is working using 10.0.9/30, i can traverse both ways

i have just setup a road warrior vpn into office2 using 10.0.8/30 and i can access 10.20.1/24 fine. what do i need to do to access office1 10.0.1/24 when i am on the vpn? i have checked the firewall logs and allowed the blocked access but it looks like i'm missing a route configuration somewhere?

just add on the OpenVPN server on office the following command in the advanced options:

push "route 10.0.1.0 255.255.255.0";

Then the OpenVPN server send a static route to the OpenVPN Client (RoadWarrior).
But you have to allow the traffic from the OpenVPN RoadWarrior Tunnel network on office2 and office1 - but I am sure you know that.