Tuesday, December 31, 2019

OpenVPN on Docker Routing w/ PfSense

I have a server (IP: 192.168.101.2) running a Docker container with OpenVPN Access Server. OpenVPN AS is giving all clients IP's in the 172.16.0.0/24 range. I would like these clients to access everything in the 192.168.200.0/24 range.

I have a PfSense setup with the 192.168.101.0/24 and 192.168.200.0/24 VLAN's both set up and a firewall rule running in between them:

Source Port Destination Port Gateway Queue
192.168.101.2 * 192.168.200.0/24 * * None

However, this is having the effect of letting everything on the 192.168.101.2 server through to 192.168.200.0/24. I only want the OpenVPN clients to be able to get through to 192.168.200.0/24, instead of the entire server.

---

What PfSense settings should I add/change on that firewall rule to get only the 192.168.101.2 VPN Clients to access the other subnet, instead of the entire server?



No comments:

Post a Comment