Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Issues connected ipsec network to openvpn network

    Scheduled Pinned Locked Moved OpenVPN
    2 Posts 2 Posters 1.1k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • R
      root2020
      last edited by

      Here is my setup

      Main –192.168.0.0/24 is the main site with pfsense
      East Coast--192.168.3.0/24 Connected via IPsec to main site
      Roadwarrior --192.168.1.0/24 laptop connected via openvpn to main site.

      Roadwarrior------IPsec---> Main pfsense site <-------openVPN----- East Coast

      From the main site I have connectivity to the east coast via IPsec with no problems.
      From the road-warrior I have connectivity to the main site via openvpn with no problems.

      However I would like to be able to connect to the East Coast from my roadwarror going through the main pfsense site
      What extra settings do I need to add in order to make this happen from the roadwarrior?

      Thanks!

      Rhett

      1 Reply Last reply Reply Quote 0
      • P
        phil.davis
        last edited by

        In the Main Site OpenVPN Server Advanced box add:

        push "route 192.168.3.0 255.255.255.0"
        

        That will tell your OpenVPN road warriors about the route to East Coast.
        In the East Coast config, you will also need to tell it that the road warrior subnet (192.168.1.0/24) is reached across the IPsec link to Main - then East Coast can route/reply back to Road Warrior. I don't use IPsec, but I guess that will be easy.
        If you have restrictive firewall rules on OpenVPN or IPsec then you will need to modify those to pass packets to/from all 3 subnets.

        As the Greek philosopher Isosceles used to say, "There are 3 sides to every triangle."
        If I helped you, then help someone else - buy someone a gift from the INF catalog http://secure.inf.org/gifts/usd/

        1 Reply Last reply Reply Quote 0
        • First post
          Last post
        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.