Truenas Scale as site2site VPN Router

[kevinkronberg]

Hi everyone, I hope one of you will be able to help me :)

I just switched from Qnap to TrueNAS Scale and the change has been smooth, everything is working great. I however have one issue i haven't been able to solve. I have previously used my Qnap's as site 2 site VPN routers between two locations, but i cant get it to work with Truenas Scale.

The TrueNAS's on both sites are able to access everything, but the clients on Site1 are not able to access the client network on site2 and vice versa. Client VPN works fine on both sites, so it's only the routing between client networks i haven't been able to solve.

It's not the real IP's i use in the drawing, it's just an illustration of what i try to accomplish.

Any help is much appreciated

Br Kevin

 

[zlatkomajstor]

You need to push the first network route to clients that are connecting to the second VPN and vice versa. Also you need to enable IP forwarding and NAT the client connections on each server. I have made a tutorial about doing this on TrueNAS Scale: https://www.youtube.com/watch?v=l1Wa8O-TcL0

 

[kevinkronberg]

You need to push the first network route to clients that are connecting to the second VPN and vice versa. Also you need to enable IP forwarding and NAT the client connections on each server. I have made a tutorial about doing this on TrueNAS Scale: https://www.youtube.com/watch?v=l1Wa8O-TcL0

Thank you for your reply. I have tried to follow your guide ( great guide btw. :) But it didn´t solve anything for me. I just ended up with the same result as i have now, just without the shutdown scripts and without some errors in the logs because of the scripts.

• Client VPN are working great for both sites
• Both NAS´s can reach everything ( when i try from CLI )

But i still cant route from a client 1 to client 2. All routes are pushed in the VPN config and when i do traceroutes i can see that traffic stops at the NAS. I am using are a bridge network on the NAS, I´m not sure if that makes a difference.

 

[zlatkomajstor]

Can you reach the second TrueNAS server from the clients of the first and vice versa(the NIC IP and the OpenVPN IP)?
Also, at which NAS traceroute stops, at the NAS where the VPN client is or at the NAS of the other network?