I'm having headake for now. Impossible to make my network map working...
I can join networks with IPSEC but can't set the default route via the
It was working great with a remote subnet of 184.108.40.206/1 on right m0n0
and local subnet 220.127.116.11/1 on left m0n0. But it's only working on high
internet IP. Impossible to ping 64.x.x.x or 84.x.x.x.x.
I'am giving up for the moment.
No more idea?
John Tran a écrit :
> Vincent Fleuranceau wrote:
>> -------- Message original --------
>>> Hi all,
>>> I have a problem with the network map bellow :
>>> I am using a IPSEC between LAN and LAN' because I'm using a WiFi
>>> outdoor link. No problem to ping hosts between LAN and LAN'.
>>> Impossible to ping from LAN' to DMZ or Internet How can I define a
>>> "default ipsec route" for LAN' client?
>> You may have to add specific rules to allow traffic from 192.168.2.0/24
>> to pass on the 192.168.1.254 interface and/or on the 172.20.4.254
>> Many issues involve both routing and filtering.
> I think that (on linux you) would add the following route to your LAN
> route add -net [remote net] netmask 255.255.255.0 gw [ipsec gateway ip]
> dev [interface]