Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Routing all traffic through VPN tunnel to secure Gateway

    Scheduled Pinned Locked Moved OpenVPN
    4 Posts 2 Posters 5.2k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • E Offline
      endurion
      last edited by

      Is it feasibly possible to route all network traffic on a pfsense box through a site-to-site tunnel and out the gateway at the other end? Obviously the outgoing traffic creating the tunnel itself could never be routed through the tunnel in the first place, so I'm not sure where I should start in trying to figure out a solution to this idea.

      The purpose of this experiment is to securely route all NAT'ed traffic across an unsecured link, through the openvpn tunnel, to a known secure gateway.

      Has this been covered anywhere? Any ideas?

      1 Reply Last reply Reply Quote 0
      • GruensFroeschliG Offline
        GruensFroeschli
        last edited by

        http://forum.pfsense.org/index.php/topic,7001.0.html

        We do what we must, because we can.

        Asking questions the smart way: http://www.catb.org/esr/faqs/smart-questions.html

        1 Reply Last reply Reply Quote 0
        • E Offline
          endurion
          last edited by

          Excellent. Thank you for all the work you've put into that post there.

          1 Reply Last reply Reply Quote 0
          • GruensFroeschliG Offline
            GruensFroeschli
            last edited by

            I never really run into this problem, but as far as i see it, you cannot use the redirect-command in a shared key setup.

            You would have to add routes for the remote gateway and 0.0.0.0/1 and 128.0.0.0/1 manually.
            But from that thread: http://forum.pfsense.org/index.php/topic,6056.0.html
            It doesnt seem to be a problem :)

            Let us know if it worked for you.

            We do what we must, because we can.

            Asking questions the smart way: http://www.catb.org/esr/faqs/smart-questions.html

            1 Reply Last reply Reply Quote 0
            • First post
              Last post
            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.