test network design - are there ways to access a downstream virtual network?

[jata]

I am a network / opnsense newbie and I am learning by using an isolated opnsense firewall/network using a VM environment.

I have this all working nicely - see architecture attached - don't laugh too much

I can easily access home network from test network (and i expected this as it is 'upstream).

What would I need to do to be able to access devices in test network from home?

Is a VPN the only way?

[hharry]

as your Test OPNsense WAN is connected to your home LAN, really only 2 x options.

1. VPN from Home LAN, to test opnsense


2. inbound port forward configured on test OPNsense deployment.


I assume the reason you've connected OPNsense WAN to Home LAN, is to test the test OPNsense F/W etc ?

The other option would be to connect a second LAN interface of test OPNsense to LAN home network...

[jata]

Thanks.

Yes this all just for learning but I see that the setup WAN setup on the test network makes it tricky.

I thought it might be possible using an outbound NAT rule on the home network but I can't get it working.

Appreciate the help and thanks again.