4

AFAIK there is no such thing as a “site to site” VPN, one end must be a server and the other a client (e.g. openssh). Then if you set up routes/firewall/DNS correctly (which I said I can do on other routers just running linux or opnsense) then you can get it to work like “site to site”

Of course you can use a single static key which sometimes is called “site to site” in that both client and server need the static key (which I am doing here) instead of a road warrior setup with certs etc.

Not surprising I can ping from the GL to “my” end of the tunnel (tunnel ip) but of course can’t ping anything on my network including my router because the GL doesn’t know where to send request to my lan subnet (i.e. into that tunnel).

Maybe rather than trying to find anything on the UI i’ll ssh to cli and try to get the routes, etc set up like I know how. Just was wondering if it was possible via the UI using and openvpn server.

Well not really the solution I want but I could set up a client and the GL and server o my router and have a second vpn for the “backhaul”.