From mboxrd@z Thu Jan 1 00:00:00 1970 From: "Fiorangelo Peluso" Date: Fri, 28 Nov 2003 09:03:56 +0000 Subject: Re: [LARTC] Forward + Routing Message-Id: List-Id: References: In-Reply-To: MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable To: lartc@vger.kernel.org Hi, >** AND the opposite route back ON GATEWAY B1 TO Subnet A via GATEWAY B ** I already added this route! GATEWAY B1 can send packets to Subnet A=20 correctly... Seems just that packets outgoing from ipsec interface are not = routed anymore towards Subnet C via Gateway B1... >If that doesn't work, you may need to ask the FreeS/WAN guys since it migh= t=20 >be an erouting problem on GATEWAY B. How? Thanks >From: Damion de Soto >To: Fiorangelo Peluso >CC: lartc@mailman.ds9a.nl >Subject: Re: [LARTC] Forward + Routing >Date: Fri, 28 Nov 2003 13:45:34 +1000 > >Hi Fiorangelo, > >>Subnet A <-> GATEWAY A ------- VPN with FREE/SWAN --------- GATEWAY B <-= >=20 >>Subnet B <-> GATEWAY B1 (physically on Subnet B) <-> Subnet C >>The question is: HOW DO I MAKE SUBNET C REACHABLE FROM SUBNET A? >> >>I created a new connection in ipse.conf specifying as leftsubnet just the= =20 >>Subnet C. This way I can ping Subnet C from GATEWAY B but not from Subnet= =20 >>A.. It seems to me that packets are not routed correctly if they came fro= m=20 >>Subnet A! I already added a route to Subnet C on the GATEWAY B but it=20 >>seems to work only for packets from the Gateway and not for the forwarded= =20 >>packets from Subnet A.. >You'll need a new ipsec.conf connection at GATEWAY A and GATEWAY B for >Subnet A <-> Subnet C, (which I think you did) > >Then you need a route ON GATEWAY B TO Subnet C via GATEWAY B1 (which I=20 >think you did), >** AND the opposite route back ON GATEWAY B1 TO Subnet A via GATEWAY B ** > >If that doesn't work, you may need to ask the FreeS/WAN guys since it migh= t=20 >be an erouting problem on GATEWAY B. > >That is assuming there is no NAT or Masquerading occuring anywhere. > >Regards, > >-- >~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ >Damion de Soto - Software Engineer email: damion@snapgear.com >SnapGear - A CyberGuard Company --- ph: +61 7 3435 2809 > | Custom Embedded Solutions fax: +61 7 3891 3630 > | and Security Appliances web: http://www.snapgear.com >~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ > --- Free Embedded Linux Distro at http://www.snapgear.org --- > _________________________________________________________________ MSN Extra Storage: piena libert=E0 di esprimersi e comunicare =20 http://www.msn.it/msnservizi/es/?xAPIDS4&DI=1044&SU=3Dhttp://hotmail.it/&HL= =3DHMTAGTX_MSN_Extra_Storage _______________________________________________ LARTC mailing list / LARTC@mailman.ds9a.nl http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/