On Thu, January 28, 2010 11:31 am, Nathan Eisenberg wrote: > I'm betting that the machines in the other office do not have a route to > get to 10.99.99.0. Add a static route to the remote office gateway/IPSec > router, sending traffic bound for 10.99.99.0/x to your OpenVPN server. > The OpenVPN server will know where to send the traffic from there. >
Also, do not forget to add it to the Phase2 negotiations. If you are not exporting the 10.99.99.x network as being "behind the tunnel" (from the sattelite location); then you can route it through the tunnel, but it wont work. (This might be different if you are securing the link between the machines, this likely needs an gif/gre interface, which can be used for routing). Cheers, Remko -- /"\ Best regards, | re...@freebsd.org \ / Remko Lodder | re...@efnet X http://www.evilcoder.org/ | / \ ASCII Ribbon Campaign | Against HTML Mail and News --------------------------------------------------------------------- To unsubscribe, e-mail: support-unsubscr...@pfsense.com For additional commands, e-mail: support-h...@pfsense.com Commercial support available - https://portal.pfsense.org