Routed traffic on openvpn through a CARP IP

Started by mauzilla, July 22, 2023, 10:49:52 AM

Previous topic - Next topic
We're setting up HA and want to ensure that all of our VPN traffic is routed through a CARP IP instead of the default WAN IP of the master firewall.

For sake of demo, I am using the following IP's:

- WAN IP: 129.232.0.2 (this is the new WAN IP)
- CARP IP: 129.232.0.1 (this is the old WAN IP which is now added as a CARP IP through which I want all my vpn traffic to go)

1. I changed the WAN IP to the new WAN IP 129.232.0.2
2. I added the old WAN IP as a CARP IP 129.232.0.1
3. I changed my VPN config's interface to a single IP 129.232.0.1 (so that our VPN configs don't need an update)

As expected all of my VPN traffic is now routed through 0.2 but I need to change this to 0.1

I assume I need to add an outbound route under NAT and attempted the following:

WAN openVPNInternal net * * * 129.232.0.1/32 * NO OpenVPN route to the original static IP

Even after restarting openVPN and applying changes, my traffic is still routed through 0.2 instead of 0.1

Any advice / tips / helping hand will greatly be appreciated :)