Yes. I can actually ping from the clientA to
m0n0wallB because the address differences between the
m0n0wall level and client levels triggers an ARP.
The odd thing is that using ethereal, I don't think
I'm seeing any packets related to the gif0 interface
flowing back and forth.
Correct me if I'm wrong, but I think that on the
client level, the ARP generated will be picked up by
the gif0 interface which somehow transmits the ARP,
through a tunnel on the m0n0wall layer, to the clientB
network. In theory, I should be seeing this ARP in
the air, no?
This is why I think maybe I'm setting the tunnel up
Any ideas? thanks
--- "Christopher M. Iarocci" <iarocci at eastendsc dot com>
> This might sound trivial, but did you uncheck the
> "Block private
> networks" under the Interfaces->Wan section?
> Steven Shatz wrote:
> >Hello all,
> >I have a question as to whether anyone has set up
> >routing between m0n0wall devices such that clients
> >either m0n0wall device can access clients on the
> >m0n0wall device, with each m0n0wall device having
> >different subnets.
> >My desired configuration is two m0n0wall devices:
> >LAN: 192.168.2.1 (serves clients 192.168.2.0/24
> >WAN: 192.168.1.198
> >LAN: 192.168.3.1 (serves clients 192.168.3.0/24
> >WAN: 192.168.1.197
> >ClientA: (located under m0n0wallA)
> >ClientB: (located under m0n0wallB)
> >Now, is there any way that Client B can reach
> >A, or vice-versa?
> >I tried using static routes in the kernel by adding
> >routes from the m0n0wallA to m0n0wallB's WAN (route
> >add 192.168.3.0 -netmask 255.255.255.0
> >with no success. The traceroutes terminate at
> >192.168.1.197 and don't continue routing down into
> >subnet 192.168.3.0/24.
> >I tried using proxy ARP and server-NAT to expose
> >subnets, but by the time the ARPs reach the
> >192.168.1.1 subnet, ARPs aren't triggered and are
> >on their way to the next router specified by
> >Are there any ideas as to what I may be missing or
> >I can address this issue?
> >Do You Yahoo!?
> >Tired of spam? Yahoo! Mail has the best spam
> protection around
> >To unsubscribe, e-mail:
> m0n0wall dash unsubscribe at lists dot m0n0 dot ch
> >For additional commands, e-mail:
> m0n0wall dash help at lists dot m0n0 dot ch
Yahoo! Mail - PC Magazine Editors' Choice 2005