pfSense & IPsec setup + Wireguard remote Access, how to Remote Access from the road to Multi site to site VPN simultaneously?

Networking & Firewalls
1

Currently, we have the following IPsec tunnels setup:

  • Site A ↔ Site B, with P1 and P2 tunnel, WAN with port 500 & 4500, IPsec rule allow All.
  • Site A ↔ Site C, with P1 and P2 tunnel, WAN with port 500 & 4500, IPsec rule allow All.

pfSense boxes, don’t have any IPsec gateway, other simple any any any rule.

Site A can ping to both B & C.
Site B can ping to A, but not C, this is OK, as I am not setting all 3 sites as loop.
Site C can ping to A, but not B, this is OK., as I am not setting all 3 sites as loop.

On the road, able to Wirguard remote access A, B & C separately, but not simultaneously!

Would like to be able just remote access Site A , then can reach B & C simultaneously through Site A’s connection.

Site A IP is 203.100.100.2 subnet 192.168.0.0/24
Site B IP is 203.100.200.2 subnet 192.168.1.0/24
Site C IP is 203.100.300.2 subnet 192.168.2.0/24

Site A to B 1st Phase 2 is Local Network=LAN subnet, Remote Network=Network, 192.168.1.0/24
Site B to A 1st Phase 2 is Local Network=LAN subnet, Remote Network=Network, 192.168.0.0/24

Site A to C 1st Phase 2 is Local Network=LAN subnet, Remote Network=Network, 192.168.2.0/24
Site C to A 1st Phase 2 is Local Network=LAN subnet, Remote Network=Network, 192.168.0.0/24

What am I missing?

2

Did you setup your IPsec rules on B and C to allow your wireguard network inbound to any (any to test, add restrictions later)?

You’ll also need to setup phase 2 to allow your wireguard network.