Openvpn Routing?

[anwin (Andreas Winkler)]

Hello,
I have two locations connected via IPsec.

Now I’d like it so that when someone connects to Location A using OpenVPN, they also have access
to a folder on Location B.

I just can’t seem to get it to work. What should the firewall rule be? Or do I need to configure routing?

[ms (Michael Tremer)]

You might need both. First of all you have to set up routing so that the remote system has a route to the OpenVPN subnet at location A and that OpenVPN clients have a route to the remote subnet. And then you will need to configure firewall rules so that packets may actually flow.

[tphz (iptom)]

I hope the link below will be helpful

Traverse Net-to-Net VPN from Road Warrior

Regards

[anwin (Andreas Winkler)]

@tphz

Ich hoffe, der untenstehende Link ist hilfreich

Well, not quite—in my setup, here’s how it works:
Site A → Site B, connected via IPSec with WireGuard as a fallback.
Unfortunately, I’ve noticed that the OpenVPN networks have the same IP address at both sites. This means everything works locally, but not via OpenVPN. It’s a bit too much work for me to change this right now, since I’d definitely have to make changes on all the clients as well.

[tphz (iptom)]

Analyse the configurations given below

Wireguard - small hints for various configurations

I have collected tips from several of my posts on various configurations for Roadwarrior client access to the GREEN IPFireB network via IPFireA. WireGuardClient--WireGuardHost2Net--IPFireA--WireguardNet2Net--IPFireB--GreenNet [obraz] OVPNClient--OVPNHost2Net--IPFireA--WireguardNet2Net--IPFireB--GreenNet [obraz] WireGuardClient--WireGuardHost2Net--IPFireA--OVPNNet2Net--IPFireB--GreenNet [obraz] Regards

edit
ps.
The IPFire OpenVPN server pushes the configuration to the client.
There is no need to re-download the client configuration file after changes have been made to the OpenVPN configuration.

[tphz (iptom)]

I came across an interesting post

OpenVPN - Local network and remote network of the same class

Hi all, it seems that OpenVPN provides therefor an internal option called --client-nat → $ openvpn --help | grep client-nat --client-nat snat|dnat network netmask alias : on client add 1-to-1 NAT rule. which is a so called 1-to-1 NAT which is also pushable (via CCD). Have never used it so no experience with this but you can find on OpenVPNs Github page → https://github.com/OpenVPN/openvpn/blob/master/doc/man-sections/client-options.rst further informations but also an interesting discuss…

Regards