On 3/25/06, Luigi Abretti <luigi at itsosgadda dot it> wrote:
> Help me:
> Firewall A
> Mode: Tunnel
> Interface: ?
> Local Subnet: Type:? Address: ?
> Remote Subnet: ?
> Remote Gateway: ?
Set up all that stuff exactly the same as the connection you have
working now, except change the local and remote subnet appropriately.
local subnet: 192.168.10.0/24
remote subnet: 192.168.5.0/24
local subnet: 192.168.5.0/24
remote subnet: 192.168.10.0/24
You can make this a lot cleaner by setting the DMZ subnet on firewall
A to something within 10.0.0.0/8. I'm sure you don't need a whole /8
network on the LAN of that machine, though changing the LAN subnet
could end up being a significant amount of work. You could make the
LAN 10.0.0.0/24 and the DMZ 10.10.0.0/24, or something like that, and
the single 10.0.0.0/8 VPN tunnel will work.