# VPN/Site to Site

# Fix: PFSense Remote Wireguard VPN Clients Access to Wireguard Site to Site VPN

<div class="post-thumbnail header" id="bkmrk-">![FIX: PFSense remote wireguard vpn clients access to wireguard site to site vpn](https://jarrodstech.net/wp-content/uploads/2022/02/vultr.drawio.png)</div>Recently I’ve been testing WireGuard with my PFSense setups, rather than IPsec and OpenVPN. I’ve found it really good and I think WireGuard works really well. The one thing I was a little stuck on was how to allow remote clients from one site to access devices on the second sites LAN.

<div class="post-wrap" id="bkmrk-%C2%A0-main-site-remote-s"><div class="post-content entry-content"><figure class="wp-block-image size-full">![](https://jarrodstech.net/wp-content/uploads/2022/02/vultr.drawio.png)</figure><figure class="wp-block-table"><table><tbody><tr><td> </td><td>**Main Site**</td><td>**Remote Site**</td></tr><tr><td>**LAN**</td><td>10.0.0.1/24</td><td>10.19.96.3/20</td></tr><tr><td>**WireGuard Site to site**</td><td>172.16.18.1/31</td><td>172.16.18.0/31</td></tr><tr><td>**WireGuard Remote Clients VPN**</td><td>172.16.17.1/24</td><td> </td></tr></tbody></table>

</figure></div></div>I want my remote devices connected to the main site via the WireGuard to be able to access the 10.19.96.3/20 LAN on the remote site.

## ASSUMPTIONS

<div class="post-wrap" id="bkmrk-you-already-have-a-w"><div class="post-content entry-content">1. You already have a WireGuard Site-to-Site VPN setup and can route traffic between the two sites LAN’s.
2. You already have a wireGuard remote client VPN setup and can access the main sites LAN

</div></div>## SIMPLE FIX

<div class="post-wrap" id="bkmrk-log-into-your-remote"><div class="post-content entry-content">1. Log into your Remote PFsense router. Go to System -&gt; Routing -&gt; Static Routes.
2. Add a static route for your WireGuard Remote Clients VPN subnet(Main Site), use the WireGuard Site-to-Site VPN Gateway.![](https://jarrodstech.net/wp-content/uploads/2022/02/routes2-1024x376.png)
3. Now go to VPN -&gt; WireGuard-&gt; Peers. Select edit on your main site peer.
4. Under the Address Configuration, add your WireGuard Remote Clients VPN subnet(Main Site) to the allowed IP’s. ![](https://jarrodstech.net/wp-content/uploads/2022/02/peer-1024x291.png)
5. Now remote clients connected to the main site should be able to access your remote sites LAN.

</div></div>