From mboxrd@z Thu Jan 1 00:00:00 1970 From: Damion de Soto Date: Fri, 28 Nov 2003 03:45:34 +0000 Subject: Re: [LARTC] Forward + Routing Message-Id: List-Id: References: In-Reply-To: MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit To: lartc@vger.kernel.org Hi Fiorangelo, > Subnet A <-> GATEWAY A ------- VPN with FREE/SWAN --------- GATEWAY B > <-> Subnet B <-> GATEWAY B1 (physically on Subnet B) <-> Subnet C > The question is: HOW DO I MAKE SUBNET C REACHABLE FROM SUBNET A? > > I created a new connection in ipse.conf specifying as leftsubnet just > the Subnet C. This way I can ping Subnet C from GATEWAY B but not from > Subnet A.. It seems to me that packets are not routed correctly if they > came from Subnet A! I already added a route to Subnet C on the GATEWAY B > but it seems to work only for packets from the Gateway and not for the > forwarded packets from Subnet A.. You'll need a new ipsec.conf connection at GATEWAY A and GATEWAY B for Subnet A <-> Subnet C, (which I think you did) Then you need a route ON GATEWAY B TO Subnet C via GATEWAY B1 (which I think you did), ** AND the opposite route back ON GATEWAY B1 TO Subnet A via GATEWAY B ** If that doesn't work, you may need to ask the FreeS/WAN guys since it might be an erouting problem on GATEWAY B. That is assuming there is no NAT or Masquerading occuring anywhere. Regards, -- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Damion de Soto - Software Engineer email: damion@snapgear.com SnapGear - A CyberGuard Company --- ph: +61 7 3435 2809 | Custom Embedded Solutions fax: +61 7 3891 3630 | and Security Appliances web: http://www.snapgear.com ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ --- Free Embedded Linux Distro at http://www.snapgear.org --- _______________________________________________ LARTC mailing list / LARTC@mailman.ds9a.nl http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/