2

I want to put a pfSense router in front of my Untangle UTM. There is only one thing I am not too sure about.

If the Untangle box will sit behind another router and run OpenVPN, all I need to do to route traffic to the Untangle through the pfSense is add a static route on the pfSense box and open the port used by OpenVPN right?

Right now the Untangle box is the router.

Improve this question
1
  • Old now, but why would you do this? Untangle can do anything you wanted pfSense to do.
    – Joel Coel
    Jul 13, 2015 at 5:06

3 Answers 3

Reset to default
3

In most cases, not even a route. A port map/forward entry on the pfSense to the Untangle should be all that is needed.

Improve this answer
9
  • Really? That simple?
    – AtomicPorkchop
    Jun 29, 2011 at 1:36
  • 1
    Yup... Just "poking" the right hole(s) and directing them to the correct inside host.
    – user48838
    Jun 29, 2011 at 1:49
  • Well I finally did the switch, and something went horribly wrong, so this idea was a bust. Thanks for the advice anyway.
    – AtomicPorkchop
    Jul 6, 2011 at 0:03
  • What went wrong?
    – user48838
    Jul 6, 2011 at 1:45
  • As far as I can tell, Untangle was not allowing most traffic through the VPN. No one could login to the AD domain, no email in remote offices, no DNS in remote offices... Yet, get this. I could browse windows shares on the remote server and the remote office could see the main office. So I reverted back to the old way, which was Untangle as the primary router and everything is working fine now.
    – AtomicPorkchop
    Jul 6, 2011 at 4:26
0

Why not use Openvpn server in pfsense ?

Improve this answer
3
  • I did not want to use the pfsense OpenVPN because every so often I hear how they are going to drop it in the future version. I don't want to get commited to something and then have it blow up in my face.
    – AtomicPorkchop
    Jul 6, 2011 at 0:02
  • Okay wasn't aware of that, I haven't read about they are dropping it
    – Ninja
    Jul 6, 2011 at 6:50
  • They might not be dropping it, I just read somewhere they may be, Come to think of it that might have been m0n0wall I was thinking of. They had dropped OpenVPN sometime back.
    – AtomicPorkchop
    Jul 6, 2011 at 18:29
0

A static route on in the Pfsense for the OpenVPN address pool pointing to you Untangle server will be needed or to activate the "Route VPN traffic that would go through the Bridge".

Just port forwarding will just allow the tunnel to be established but if clients/servers on the other side have Pfsense as there GW they will need the route back. (or Packet filter rule).

Improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .