OPNsense Forum

Archive => 16.7 Legacy Series => Topic started by: cclements on September 06, 2016, 12:33:03 am

Title: IPSec VPN Push Route to Client Device
Post by: cclements on September 06, 2016, 12:33:03 am

Hello all,

I have an IPSec VPN setup to iOS devices that is working without issue, however, I would like to push a route to an internal network other than the LAN subnet in order for my clients to reach an additional internal subnet through the VPN tunnel.  However, in the IPSec configuration it appears that I can only specify one local network in the phase 2 configuration.

Does anyone know how I can accomplish this?

Thanks,

Chris

Title: Re: IPSec VPN Push Route to Client Device
Post by: reep on September 06, 2016, 01:04:46 am

I don't think ipsec does 'push' routes in the same way as you think with say OpenVPN.

I think you will have to look for a different solution to your issue - routing in your own network being the obvious one. (Note  others may have brighter ideas than mine !)

B. Rgds
John

Title: Re: IPSec VPN Push Route to Client Device
Post by: franco on September 19, 2016, 12:08:35 am

Hi Chris,

The solution is simple: add a second phase 2 entry to your phase 1. ;)


Cheers,
Franco