Re: lug-bg: VPN route problem
- Subject: Re: lug-bg: VPN route problem
- From: Nickola Kolev <nikky@xxxxxxx>
- Date: Mon, 31 Jul 2006 14:39:44 +0300
- Delivered-to: lug-bg-list@xxxxxxxxxxxxxxxxxx
- Delivered-to: lug-bg@xxxxxxxxxxxxxxxxxx
- Organization: MNET
Здравей,
On Mon, 31 Jul 2006 11:21:26 +0300
"Stanimir Kabaivanov" <stanimir.kabaivanov@xxxxxxxxx> wrote:
[ кръц ]
> #Linux-racoon -> MyZwall and MyZwall -> Linux-racoon
> setkey -c << END
> spdadd $REMOTE_EXT_IP $LOCAL_EXT_IP any -P in ipsec
> esp/tunnel/$REMOTE_EXT_IP-$LOCAL_EXT_IP/unique;
> spdadd $REMOTE_LAN/$REMOTE_SUBNET_MASK $LOCAL_LAN/$LOCAL_SUBNET_MASK
> any -P in ipsec esp/tunnel/$REMOTE_EXT_IP-$LOCAL_EXT_IP/unique;
> spdadd $LOCAL_EXT_IP $REMOTE_EXT_IP any -P out ipsec
> esp/tunnel/$LOCAL_EXT_IP-$REMOTE_EXT_IP/unique;
> spdadd $LOCAL_LAN/$LOCAL_SUBNET_MASK $REMOTE_LAN/$REMOTE_SUBNET_MASK
> any -P out ipsec esp/tunnel/$LOCAL_EXT_IP-$REMOTE_EXT_IP/unique;
> END
[ кръц ]
Тук би ли могъл да добавиш нещо от сорта на:
spdadd $LOCAL_LAN/$LOCAL_SUBNET_MASK $REMOTE_LAN/$REMOTE_SUBNET_MASK
any -P fwd ipsec esp/tunnel/$LOCAL_EXT_IP-$REMOTE_EXT_IP/require;
[ кръц ]
> iptables -t nat -I POSTROUTING 1 -p 50 -j ACCEPT
> ip route add 192.168.x.0/23 via $LOCAL_EXT_IP src 192.168.y.1
[ кръц ]
Тук наистина ли искаш да маскираш всичко, което минава през тунела, с
локален IP адрес?
--
Поздрави,
Никола
Attachment:
pgpL6kYKWbt9s.pgp
Description: PGP signature
|