Follow

Connect Multiple Remote Networks with OpenVPN

Overview

With OpenVPN Site-to-Site tunnels you may wish to route or allow access to multiple networks through the VPN. One NGFW will be designated as the Server, the other will be designated as the Client. The configuration is possible using Exported Networks and the client Remote Networks setting.

 

Server Configuration

On the Server NGFW, you will need to define the local networks you wish to allow access to. This is done using the Exported Networks tab. Then create the client, listing any remote networks you need to have access to.

  1. Go to Apps >OpenVPN Settings > Server. Make sure "Server Enabled" is checked.

  2. On the Server tab, click the Exported Networks sub-tab.

  3. The internal interface network is added by default. Click Add and add the local network you want to allow access to in CIDR notation. Add a new entry for each additional local network. 
    AddExportedNetwork.jpg
    Clicking the image above will load it, full-size, in a new window.

  4. Next, create the client configuration. Go to the Remote Clients tab.

  5. Click Add to add a new client. This client will be used for the other Untangle device.

  6. For Type select Network. In Remote Networks fill in any remote networks you want to have access to in CIDR notation. Multiple subnets can be separated with commas.AddRemoteClient.jpg
    Clicking the image above will load it, full-size, in a new window.


  7. Click Done and then Save on the main configuration page to generate the client. 

  8. Click Download Client.

 

Client Configuration

On the Client NGFW you simply need to upload the client configuration file that was downloaded in the previous step.

  1. Go to Apps > OpenVPN Settings > Client.

  2. Click Upload Remote Server Configuration File and upload the configuration you downloaded from the server.ImportConfig.jpg
    Clicking the image above will load it, full-size, in a new window.


  3. Click Save to activate the VPN.

 

 

Was this article helpful?
2 out of 3 found this helpful
Have more questions? Submit a request

Comments

Powered by Zendesk