Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Roadwarrior routing help

    Scheduled Pinned Locked Moved OpenVPN
    3 Posts 3 Posters 1.6k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • P
      pfnewbie12
      last edited by

      Hi, new to pf looking for some guidance, I have the following set up,

      office1 - 10.0.1/24
      office2 - 10.20.1/24
      office1 and office2 site to site is working using 10.0.9/30, i can traverse both ways

      i have just setup a road warrior vpn into office2 using 10.0.8/30 and i can access 10.20.1/24 fine.  what do i need to do to access office1 10.0.1/24 when i am on the vpn?  i have checked the firewall logs and allowed the blocked access but it looks like i'm missing a route configuration somewhere?

      1 Reply Last reply Reply Quote 0
      • T
        tbrummell
        last edited by

        Without seeing route lists from both machines, it's hard to troubleshoot.  My first guess would be saying "office1" doesn't have a known route to 10.0.8.0/30 is it sends replies to its default route which would be it's WAN port.  Start with that and let us know.

        1 Reply Last reply Reply Quote 0
        • N
          Nachtfalke
          last edited by

          @pfnewbie12:

          Hi, new to pf looking for some guidance, I have the following set up,

          office1 - 10.0.1/24
          office2 - 10.20.1/24
          office1 and office2 site to site is working using 10.0.9/30, i can traverse both ways

          i have just setup a road warrior vpn into office2 using 10.0.8/30 and i can access 10.20.1/24 fine.  what do i need to do to access office1 10.0.1/24 when i am on the vpn?  i have checked the firewall logs and allowed the blocked access but it looks like i'm missing a route configuration somewhere?

          just add on the OpenVPN server on office the following command in the advanced options:

          push "route 10.0.1.0 255.255.255.0";
          

          Then the OpenVPN server send a static route to the OpenVPN Client (RoadWarrior).
          But you have to allow the traffic from the OpenVPN RoadWarrior Tunnel network on office2 and office1 - but I am sure you know that.

          1 Reply Last reply Reply Quote 0
          • First post
            Last post
          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.