To Help explain my problem.. Here is what I am mocking up to test...
Any help appreciated.. I don't want to buy a Cisco BBSM or Nomadix if I can
get this working.
It works just fine in the layer 2 network between the pix and the m0n0wall.
But as soon as I have a device from the tunnel attempt it.. It doesn't
Am I the only one that is trying to route behind a captive portal on a
Due to the number of sites and vpn's, I can't just have one big layer 2
network with a huge mask..
From: Craig Hulbert [mailto:craig at mylittleservers dot com]
Sent: Tuesday, March 14, 2006 7:34 PM
To: m0n0wall at lists dot m0n0 dot ch
Subject: [m0n0wall] Multiple Networks behind NIC of Captive Portal
I have a large network that I would like to front end with a captive portal.
The front of the m0n0wall is the Internet with NAT outbound
The LAN interface comes off a Cisco PIX that has many tunnels in network
extension (routing) mode.
The LAN interface is 192.168.0.1/24 of the m0n0wall The Pix interface is
When I send traffic across the tunnel it I can get out of the pix.. but the
m0n0wall doesnt pick up the traffic thus I can't get through it.
Is the m0n0wall limited to 1 network behind the captive portal.. i.e. no
The monowall can ping across the tunnels
The tunneled pc's can't ping the m0n0wall.. I can see the traffic going to
the m0n0wall but not coming back.
Am I missing something..
I have 500 sites I wan't to run guest access at.. I can't afford a device at
each site.. I would like to backhaul a subnet per facility over a vpn and
then hit a single m0n0wall thus making managment easier of the entire
network of guests
craig at mylittleservers dot com