Rexxer

Some tips for me and other

IPSEC + multilpe networks

I had to configure access from other local networks to remote site via IPSEC.

My environment: FreeBSD + PFSense.

I tried to add an additional SA to the both systems but that didn’t work.

I read this document: https://doc.pfsense.org/index.php/IPsec_with_Multiple_Subnets

and did such a way:

Supernetting Example

At Site A, there is one subnet, 10.0.0.0/24. This should reach 192.168.0.0/24, 192.168.1.0/24, and 192.168.2.0/24 at Site B.

Due to the “closeness” of the subnets, they could be grouped into a larger network in the tunnel definition: 192.168.0.0/22 (This would also include 192.168.3.0/24)

Now it works.

Comments are currently closed.