How to connect 2 VPNs and a local network via OPNsense?

[john_david]

Hi guys,

So I am trying to set up an OPNsense with 2 VPN servers and a local network but firewall rules are really confusing for me...

 

What I have:

• OPNsense instance
• LAN network 10.10.10.0/24.
• Same OPNsense running two OpenVPN servers:
  • a) Network_A: site-to-site server with 10.10.20.0/24 network
  • b) Network_B: remote access server with 10.10.21.0/24 network

 

What I am trying to achieve:

Users from all networks can ping each other, communicate freely.
Users from Network_B can have WAN access via OPNsense DNS (unbound).

 

What I currently have:

Users from LAN can ping everything.
Users from Network_A and Network_B can ping LAN, but cannot ping eachother (only respective OpenVPN servers).

Users from Network_B can have WAN access only if I specify 1.1.1.1 DNS for them. They do not have WAN address via 10.10.10.1 (OPNserse with unbound).

 

What I tried:

I have created two rules on OpenVPN interface:
a) Allows all connections from Network_A to Network_B
b) Allows all connections from Network_B to Network_A

 

But this did not help.

 

Am I missing something? I have no logical solution for this and would be glad if you could help...