Question

We have RUT956 in head office and RUT956 in branch office and we have created IPSec between them.

An Openvpn server is configured on RUT956 in the head office, and Openvpn client works fine from the home computer to the head office.

Is it possible to make a connection to the branch office through IPsec from the home computer?

Is inter vpn routing possible between openvpn and ipsec?

Thank in advance

Answer 1

Hello,

  

As I understand, this is the topology you'd like to achieve:

If so, I've tested it quite extensively but was only able to get communication working one way (IPsec → RUT956 → OpenVPN client). I could have missed something in the firewall settings, however, it requires some more experimentation. It's most likely related to the way IPsec handles routing, as there is no entry for IPsec routes in the routing table. That is most likely why OpenVPN → RUT956 → IPsec does not work.

The most important thing to keep in mind with a setup like this is to push the necessary routes to the OpenVPN clients and add the needed subnets in the IPsec configuration.

If you manage to get it working, let us know!

  

Best regards,
DaumantasG