Spoke to Spoke communication

[keith@quikmart.com]

I have multiple remote locations.  I have an OPNSense VPN connection to each remote location from our main office and it is working fine.  However, I need to be able to communicate between spokes.  How do I get spoke to spoke communication?

[bartjsmit]

Enable client-to-client in the miscellaneous options

[keith@quikmart.com]

Thank you for the quick reply. However, I do not see the client-to-client option under miscellaneous.

[bartjsmit]

Do you use OpenVPN?

[keith@quikmart.com]

I am using IPSec VPN.

[bartjsmit]

AFAIK they are strictly point-to-point

[Patrick M. Hausen]

You need to add the networks of all other remote offices to the phase 2 ("child") SA for each spoke.

So e.g.

Main office: 192.168.0.0/24
Remote 1: 192.168.1.0/24
Remote 2: 192.168.2.0/24
...

VPN for remote 1

Main - local: 192.168.0.0/24, 192.168.2.0/24, ..., remote: 192.168.1.0/24
Remote 1 - local: 192.168.1.0/24, remote: 192.168.0.0/24, 192.168.2.0/24, ...

HTH
Patrick