-------- Message original --------

> Hi all,
> 
> I have a problem with the network map bellow : 
> http://www.creape.unilim.fr/vpn.jpg
> 
> I am using a IPSEC between LAN and LAN' because I'm using a WiFi
> outdoor link. No problem to ping hosts between LAN and LAN'.
> 
> Impossible to ping from LAN' to DMZ or Internet How can I define a
> "default ipsec route" for LAN' client?

Hi,

You may have to add specific rules to allow traffic from 192.168.2.0/24
to pass on the 192.168.1.254 interface and/or on the 172.20.4.254 
interface...

Many issues involve both routing and filtering.

-- Vincent