Issues connected ipsec network to openvpn network
-
Here is my setup
Main –192.168.0.0/24 is the main site with pfsense
East Coast--192.168.3.0/24 Connected via IPsec to main site
Roadwarrior --192.168.1.0/24 laptop connected via openvpn to main site.Roadwarrior------IPsec---> Main pfsense site <-------openVPN----- East Coast
From the main site I have connectivity to the east coast via IPsec with no problems.
From the road-warrior I have connectivity to the main site via openvpn with no problems.However I would like to be able to connect to the East Coast from my roadwarror going through the main pfsense site
What extra settings do I need to add in order to make this happen from the roadwarrior?Thanks!
Rhett
-
In the Main Site OpenVPN Server Advanced box add:
push "route 192.168.3.0 255.255.255.0"
That will tell your OpenVPN road warriors about the route to East Coast.
In the East Coast config, you will also need to tell it that the road warrior subnet (192.168.1.0/24) is reached across the IPsec link to Main - then East Coast can route/reply back to Road Warrior. I don't use IPsec, but I guess that will be easy.
If you have restrictive firewall rules on OpenVPN or IPsec then you will need to modify those to pass packets to/from all 3 subnets.