Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Cross backup

    Scheduled Pinned Locked Moved General pfSense Questions
    3 Posts 2 Posters 1.1k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • H
      Herminator
      last edited by

      Dear all ! ..

      As a newby I hope someone can give me a "push"in the right direction …because I struggling already for weeks !

      I want to make a crossbackup through one Synology > pfsense over the internet to one another pfsense >Synology Nas ...as my friend does vice -versa! .We also want a regular check with separate OpenVPN connection if the backup succeeded or not ! ..How does one work ?...how doe I roughly make this work ?...Do I need twee openVPN servers..two gateways .....separate interfaces..?...
      Can the synology still reaches te Internet while making his backup through a VPN connection...?

      Ik really hope that someone can help me out !
      Appologize my english !

      1 Reply Last reply Reply Quote 0
      • P
        phil.davis
        last edited by

        You can make a site-to-site shared key OpenVPN TUN link between the 2 pfSense. Make sure your LANs are different IP subnets - e.g. 10.20.1.0/24 and 10.20.2.0/24. Use another subnet for the OpenVPN link "tunnel network", e.g. 10.20.3.0/24.
        Then add pass rules on the OpenVPN at each end to allow whatever traffic you want - e.g. if you are friendly with each other you might allow all, or you might just allow traffic between the IP addresses of your NAS boxes.
        Of course, if you backup many GB of files then you will need a fast internet connection and plenty of quota from your ISP.

        As the Greek philosopher Isosceles used to say, "There are 3 sides to every triangle."
        If I helped you, then help someone else - buy someone a gift from the INF catalog http://secure.inf.org/gifts/usd/

        1 Reply Last reply Reply Quote 0
        • P
          phil.davis
          last edited by

          Also, whichever end is the OpenVPN server will need to have a known public IP address so the client can connect. If one of you already has a static IP, then use that for the server end. Otherwise you will have to sign up to a dynamic DNS service. pfSense can keep the dynamic DNS name up-to-date with the current IP address of your OpenVPN server end - Services->Dynamic DNS.

          As the Greek philosopher Isosceles used to say, "There are 3 sides to every triangle."
          If I helped you, then help someone else - buy someone a gift from the INF catalog http://secure.inf.org/gifts/usd/

          1 Reply Last reply Reply Quote 0
          • First post
            Last post
          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.