Site to Site across 3 sites

Follow

Paul Keenan

• March 03, 2023 16:37
• Edited

Hello, I've contacted support and they have not been the most helpful with this issue. I just purchased 3 firewalla gold boxes that are at 3 different sites. Each site is rather far away and has 3 different internet providers. I just need Site to Site across 3 Sites on with Internet traffic at each location to the local provider. With LAN1 at each on all 3.

Main Site (Comcast): Lan 1: 192.168.10.1/24 Smart Devices:192.168.11.1/24 Guest: 192.168.12.1/24

 

2nd Site (Spectrum) Lan 1: 192.168.20.1/24 Smart Devices: 192.168.21.1/24 Guest: 192.168.22.1/24

 

3rd Site (Verizion) Lan 1 :192.168.30.1/24 Smart Devices: 192.168.31.1/24 Guest: 192.168.32.1/24

 

It say in order to to this you must select the internet over the VPN in the profile "I've tried both VPN types (OpenVPN & WireGuard). I've also made route rules below.

However went tested it never routers traffic over the ISP only the VPN. When I go to whoismyisp.app it says Comcast (Primary Site). What am I missing? I could really use your help.

0

• 

  Firewalla

  • March 03, 2023 16:52

  There is an option under vpn client setting, which says "Internet [Direct] [VPN]", did you set it as VPN?

  Also, I assume your sites are up and you can ping each other? (LAN network?)

  0

  Comment actions Permalink
• 

  Paul Keenan

  • March 03, 2023 16:58

  Yes that works fine if you have just 2 sites. It says if you need 3 sites accessible you have to select “internet over VPN” and them make a route rule to work around it.

  0

  Comment actions Permalink
• 

  James Willhoite

  • March 08, 2023 01:30
  • Edited

  Not sure if this can be done just in the UI. But could you:

  1) Create two WG Profiles on Main and install on 2 and 3 and set up as site to site

  2) create profile on site 2 and install on site 3.

  This way Main can talk to 2 and 3, and 2 and 3 can talk to main. Then 2 and 3 can talk to each other without having to route through the main ......

   

  I have a Ubuntu 20.04 (at work) with WG installed on it to connect to my FWG+ at home. Then have a RaspberryPi at my parents house set up to connect with my FWG+. My iPhone has a profile set up to connect to my FWG+ and it can access both sites (This is of course using my Gold+ to route the traffic since my iPhone tunnels all traffic).

   

  0

  Comment actions Permalink

Please sign in to leave a comment.