Re: [pfSense] OpenVPN - site to site questions

2012-02-26 Thread Andrew Mitchell
You can most certainly route VoIP traffic. I have an installation now 4500+ telephones between two locations. Open VPN works wonderful for this type of traffic in my opinion because it's a connection overhead is extremely low even with depression it's speeds are more than acceptable for what I

Re: [pfSense] OpenVPN - site to site questions

2012-02-26 Thread Joseph L. Casale
For each tunnel with different ip ranges it's neccessarry to use a unique OpenVPN server. I don't, I have several remote sites that connect to one instance, each has its its own /30 assigned via client configs. There are rules defined with source/dest that control which sites see what on which

[pfSense] restricting access from second openvpn

2012-02-26 Thread Udo Müller
Hi all, my setup is pfsense 2.0.1 with 2 running openvpns. ovpns1 has no restrictions. ovpns2 has restrictions: - access LAN DNS (192.168.221.203:53) server only - access DMZ HTTPS (192.168.71.105:443) server - no other access allowed Atm i have access to all local ressources. Adding

Re: [pfSense] OpenVPN - site to site questions

2012-02-26 Thread runinva
Thanks for the insight. For VOIP traffic in my previous IPSec setup I used a subnet mask of /23 at the main site where the VOIP call manager resided and /24 for all remote sites. That way the TCP VOIP call setup was possible as well as direct UDP connections between VOIPs at each remote site. Of