Client VPN access to multiple subnets

[croft]

Hi,

New user here, been on pfsense for almost a week.  I have successfully setup up a point to point VPN between two sites using a pfsense box/firewall at each location…works great.  In my setup, site A is the main server and site B acts as client.  Also, I've set up an additional VPN that allows remote users access.  This OpenVPN policy is located on the pfsense box at site A  It looks like this:

SITE A:
LAN:  192.168.0.0/24
SITE TO SITE TUNNEL:  192.168.204.0/30
REMOTE ACCESS TUNNEL:  192.168.202.0/24

SITE B:
LAN: 192.168.2.0/24

So, everything is working.  However, when a user uses the VPN from the field, they can't RDP to any resources at site B, only Site A.  I need them to be able to RDP to all servers at both sites.

Thanks!

[TwigsUSAN]

You just have to set up routes.

[marvosa]

Just need to add the following to the Advanced configuration section of your Remote Access config:

push "route 192.168.2.0 255.255.255.0";

Then make sure your firewall rules allow the traffic on each interface.  Usually easiest to start with an any/any rule.

[croft]

Hi Guys, thanks for the reply!

@marvosa, can you tell me where exactly I add the push "route…." in the config?  I think I put it in the "Advanced Configuration" section at the bottom of the OpenVPN: Server section @ Site A.

Is this correct?

[marvosa]

Yes, that is correct…. "Advanced Configuration" section.

[deepak11]

Hi guys,
I'm also having the same problem,
and also I tried adding push route in "Advanced Configuration". its not working.
any other suggessions ?

[marvosa]

@deepak11:

Hi guys,
I'm also having the same problem,
and also I tried adding push route in "Advanced Configuration". its not working.
any other suggessions ?

deepak11, this is a 4.5 year old thread, you should start a new thread with your specific details in it, so we can offer targeted troubleshooting.

At a high level, two things are needed:

• On site A's remote access config, push a route to site B's LAN to your clients

• On Site B's site-to-site config, add a return route to site A's remote access tunnel network

This can all be done in the GUI now