From mboxrd@z Thu Jan 1 00:00:00 1970 From: Alexander Kotelnikov Date: Mon, 05 Dec 2005 09:24:25 +0000 Subject: [LARTC] Re: IPSec tunnel and routing Message-Id: <87ek4rzyk6.fsf@signorini.mobitech> List-Id: MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit To: lartc@vger.kernel.org >>>>> On Mon, 05 Dec 2005 06:08:30 +0100 >>>>> "AU" = Andreas Unterkircher wrote: AU> AU> Alexander Kotelnikov schrieb: >> Ok, I would not ask all this if I have no problem with >> tunnelling. With configuration like described above, where multihomed >> maches have ip-addresses (192.168.1.1, 10.1.0.1) and (192.168.2.1, >> 10.2.0.1) tunneling works for all machines, but these two >> routers. This happenes becase if we send a packet from 10.1.0.1 into >> 192.168.2/24 this packet does not come to ipsec, but is pushed to >> default gateway, if it exists. In other words, local generated packets >> do not come through prerouting or something. >> AU> You have to add a route on 10.1.0.1 to make sure packets which belong to AU> 192.168.2.0/24 have AU> a src address of 192.168.1.1. Very funny, how do you imagine this could be done? -- Alexander Kotelnikov Saint-Petersburg, Russia _______________________________________________ LARTC mailing list LARTC@mailman.ds9a.nl http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc