Link Search Menu Expand Document
PSYCHOGUN

Site-to-Site VPN with OpenVPN

Here is how I configured two pfSense firewalls with site-to-site VPN.

Table of contents
  1. Getting started
    1. Prerequisites
    2. Internet
    3. Local (Server) pfsense.texas.com
    4. Remote (Client) pfsense.houston.com
    5. Tunnel network
  2. Local (Server) configuration
    1. Certificate Authority
    2. Certificates
    3. OpenVPN
    4. Interfaces Assignment
  3. Authors
  4. Acknowledgments

Getting started

Install the Suricata package by navigating to System > Package Manager > Available Packages.

Prerequisites

  • pfSense 2.4.4-RELEASE-p3 (amd64)

Internet

  • Local (Server): pfsense.texas.com
  • Remote (Client): pfsense.houston.com

Local (Server) pfsense.texas.com

  • Local (VLAN101): 192.168.101.1/29
  • Remote (VLAN100): 192.168.100.1/29

Remote (Client) pfsense.houston.com

  • Local (VLAN100): 192.168.100.1/29
  • Remote (VLAN101): 192.168.101.1/29

Tunnel network

  • Tunnel network: 10.0.101.0/30

Local (Server) configuration

Certificate Authority

Go to System > Cert. Manager and create a Certifice Authority by clicking “+ Add”.

img Site-to-Site-VPN-with-OpenVPN_01_Create-CA.png

Save it and export it (Export CA).

Certificates

Go to System > Cert. Manager and go to the Certificates tab. Create a new certificate

img Site-to-Site-VPN-with-OpenVPN_02_Add-Certificate.png

img Site-to-Site-VPN-with-OpenVPN_03_Certificate-Attributes.png

Save it and Export Certificate and Export Key.

OpenVPN

Select VPN > OpenVPN and click + Add.

img Site-to-Site-VPN-with-OpenVPN_04_General-Information

img Site-to-Site-VPN-with-OpenVPN_05_Cryptographic-Settings.png

img Site-to-Site-VPN-with-OpenVPN_06_Cryptographic-Settings-02.png

img Site-to-Site-VPN-with-OpenVPN_07_Cryptographic-Settings-03.png

Interfaces Assignment

Add the OpenVPN connection to an interface.

Authors

Mr. Johnson

Acknowledgments