0

I have 9 different sites and one HQ site where all 9 remote sites connect to via IPSec VPN. All are pfsense firewalls. I want to allow traffic between site 2, 3 and 4. But I do not want to configure additional IPSec tunnels between remote sites as we might plan to expand this configuration to other sites in the future. Is there a way to configure IPSec hub and spoke in pfsense?

I have tried adding additional P2 settings on each pfsense but do not get anywhere with that.

Site A (HQ) : 10.10.1.0/24 WAN: 1.1.1.1
Site B      : 10.10.2.0/24 WAN: 2.2.2.2
Site C      : 10.10.3.0/24 WAN: 3.3.3.3
Site D      : 10.10.4.0/24 WAN: 4.4.4.4

Site A IPSec tunnels:

Tunnel1: 1.1.1.1 -> 2.2.2.2, 10.10.1.0/24 -> 10.10.2.0/24 
Tunnel2: 1.1.1.1 -> 3.3.3.3, 10.10.1.0/24 -> 10.10.3.0/24 
Tunnel3: 1.1.1.1 -> 4.4.4.4, 10.10.1.0/24 -> 10.10.4.0/24 
Allow all IPSec firewall rule. No NAT for any IPSec tunnel.


Site B IPSec tunnels:

Tunnel1: 2.2.2.2 -> 1.1.1.1, 10.10.2.0/24 -> 10.10.1.0/24 
Allow all IPSec firewall rule. No NAT for any IPSec tunnel.


Site C IPSec tunnels:

Tunnel1: 3.3.3.3 -> 1.1.1.1, 10.10.3.0/24 -> 10.10.1.0/24 
Allow all IPSec firewall rule. No NAT for any IPSec tunnel.

Site D IPSec tunnels:

Tunnel1: 4.4.4.4 -> 1.1.1.1, 10.10.4.0/24 -> 10.10.1.0/24 
Allow all IPSec firewall rule. No NAT for any IPSec tunnel.


  • Please edit the question to include the router configuration. – Ron Maupin Apr 4 at 4:01

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.