Take the 2-minute tour ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

I want to put a pfSense router in front of my Untangle UTM. There is only one thing I am not too sure about.

If the Untangle box will sit behind another router and run OpenVPN, all I need to do to route traffic to the Untangle through the pfSense is add a static route on the pfSense box and open the port used by OpenVPN right?

Right now the Untangle box is the router.

share|improve this question

3 Answers 3

up vote 3 down vote accepted

In most cases, not even a route. A port map/forward entry on the pfSense to the Untangle should be all that is needed.

share|improve this answer
    
Really? That simple? –  Solignis Jun 29 '11 at 1:36
1  
Yup... Just "poking" the right hole(s) and directing them to the correct inside host. –  user48838 Jun 29 '11 at 1:49
    
Well I finally did the switch, and something went horribly wrong, so this idea was a bust. Thanks for the advice anyway. –  Solignis Jul 6 '11 at 0:03
    
What went wrong? –  user48838 Jul 6 '11 at 1:45
    
As far as I can tell, Untangle was not allowing most traffic through the VPN. No one could login to the AD domain, no email in remote offices, no DNS in remote offices... Yet, get this. I could browse windows shares on the remote server and the remote office could see the main office. So I reverted back to the old way, which was Untangle as the primary router and everything is working fine now. –  Solignis Jul 6 '11 at 4:26

Why not use Openvpn server in pfsense ?

share|improve this answer
    
I did not want to use the pfsense OpenVPN because every so often I hear how they are going to drop it in the future version. I don't want to get commited to something and then have it blow up in my face. –  Solignis Jul 6 '11 at 0:02
    
Okay wasn't aware of that, I haven't read about they are dropping it –  Ninja Jul 6 '11 at 6:50
    
They might not be dropping it, I just read somewhere they may be, Come to think of it that might have been m0n0wall I was thinking of. They had dropped OpenVPN sometime back. –  Solignis Jul 6 '11 at 18:29

A static route on in the Pfsense for the OpenVPN address pool pointing to you Untangle server will be needed or to activate the "Route VPN traffic that would go through the Bridge".

Just port forwarding will just allow the tunnel to be established but if clients/servers on the other side have Pfsense as there GW they will need the route back. (or Packet filter rule).

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.