Another vpn connection?
-
hi,
dont know where to put this. OpenVPN or Routing and Multi WAN?
Information
Network map (no clients)
http://i.imgur.com/cEDvYnR.png
all but green is pfsense.Blue is up and running, all clients connected gets redirected to strong VPN.
I got a site to site up and running between green and red, can ping clients on both networks, FTP works etc.The Issue:
I want all traffic from yellow go trough the blue and out on the strong VPN connection.
The traffic between is not heavy.Is a new VPN connection the best option or can I use some kinda redirect?
-
I don't understand your diagram. Yellow (branch) and Blue (main) are the LAN at each site. Green (branch) and Red (main) look like they should be 2 ends of an OpenVPN tunnel - but you give different subnets for each. In any case, if the pfSense's hosting Yellow and Blue LANs have an OpenVPN connecting them, then you can redirect traffic from Yellow to Blue and out to StrongVPN.
This post has a similar network config, so should help: http://forum.pfsense.org/index.php/topic,63836.0.html -
oh, i thought i was being clear about this, but guess not :P
Green and Red are the two main routers on each network.
Yellow is a "client" to green (yellow's WAN-adress is on the red's internal network)
And blue is a "client" to red. (Blue's WAN-adress is on the red's internal network)Dont know what you mean by branch, english not my mother-language. (swedish)
edit: Ill look at it when i get back from work. thanks for your answer
-
Now I understand,
Yellow router has a WAN IP in Green network - e.g. 192.168.0.2
Blue router has a WAN IP in Red network - e.g. 192.168.1.2
Devices in Green and Red can already talk to each other, because the Green and Red routers have a VPN link across the internet.
To directly route from Yellow, across Green and Red, to Blue, you need access to Green and Red to add routes to them.
But, you can setup an OpenVPN site-to-site link from Yellow WAN IP 192.168.0.2 to Blue WAN IP 192.168.1.2 without changing Green or Red routers. Then follow the information in the other post I linked to, and it it should work.