From: Damion de Soto <damion@snapgear.com>
To: lartc@vger.kernel.org
Subject: Re: [LARTC] Forward + Routing
Date: Fri, 28 Nov 2003 03:45:34 +0000 [thread overview]
Message-ID: <marc-lartc-106999253007208@msgid-missing> (raw)
In-Reply-To: <marc-lartc-106993512322200@msgid-missing>
Hi Fiorangelo,
> Subnet A <-> GATEWAY A ------- VPN with FREE/SWAN --------- GATEWAY B
> <-> Subnet B <-> GATEWAY B1 (physically on Subnet B) <-> Subnet C
> The question is: HOW DO I MAKE SUBNET C REACHABLE FROM SUBNET A?
>
> I created a new connection in ipse.conf specifying as leftsubnet just
> the Subnet C. This way I can ping Subnet C from GATEWAY B but not from
> Subnet A.. It seems to me that packets are not routed correctly if they
> came from Subnet A! I already added a route to Subnet C on the GATEWAY B
> but it seems to work only for packets from the Gateway and not for the
> forwarded packets from Subnet A..
You'll need a new ipsec.conf connection at GATEWAY A and GATEWAY B for
Subnet A <-> Subnet C, (which I think you did)
Then you need a route ON GATEWAY B TO Subnet C via GATEWAY B1 (which I think you did),
** AND the opposite route back ON GATEWAY B1 TO Subnet A via GATEWAY B **
If that doesn't work, you may need to ask the FreeS/WAN guys since it might be an
erouting problem on GATEWAY B.
That is assuming there is no NAT or Masquerading occuring anywhere.
Regards,
--
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Damion de Soto - Software Engineer email: damion@snapgear.com
SnapGear - A CyberGuard Company --- ph: +61 7 3435 2809
| Custom Embedded Solutions fax: +61 7 3891 3630
| and Security Appliances web: http://www.snapgear.com
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
--- Free Embedded Linux Distro at http://www.snapgear.org ---
_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/
next prev parent reply other threads:[~2003-11-28 3:45 UTC|newest]
Thread overview: 3+ messages / expand[flat|nested] mbox.gz Atom feed top
2003-11-27 12:09 [LARTC] Forward + Routing Fiorangelo Peluso
2003-11-28 3:45 ` Damion de Soto [this message]
2003-11-28 9:03 ` Fiorangelo Peluso
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=marc-lartc-106999253007208@msgid-missing \
--to=damion@snapgear.com \
--cc=lartc@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.