With OpenVPN Site-to-Site tunnels you may wish to route or allow access to multiple networks through the VPN. One NGFW will be designated as the Server, the other will be designated as the Client. The configuration is possible using Exported Networks and the client Remote Networks setting.
On the Server NGFW, you will need to define the local networks you wish to allow access to. This is done using the Exported Networks tab. Then create the client, listing any remote networks you need to have access to.
1) Go to OpenVPN > Settings > Server. Make sure Server Enabled is checked.
2) On the Server tab, click the Exported Networks tab.
2) The internal interface network is added by default. Click Add and add the local network you want to allow access to in CIDR notation. Add a new entry for each additional local network.
3) Next, create the client configuration. Go to OpenVPN > Settings > Server > Remote Clients.
4) Click Add and to add a new client. This client will be used for the other Untangle device.
5) For Type select Network. In Remote Networks fill in any remote networks you want to have access to in CIDR notation. Multiple subnets can be separated with commas.
6) Click Apply on the main configuration page to generate the client.
7) Click Download Client.
On the Client NGFW you simply need to upload the client configuration file that was downloaded in the previous step.
1) Go to OpenVPN > Settings > Client.
2) Click Browse and upload the configuration you downloaded from the server.
3) Click Submit.
4) Click Apply to activate the VPN.