Re: cross routing
From: David Efflandt (efflandt_at_xnet.com)
Date: 06/11/04
- Next message: flap flop: "ssh host login problem"
- Previous message: Mark Voss: "Re: Address already in use error"
- In reply to: Pascal Bourguignon: "cross routing"
- Next in thread: Antoine EMERIT: "Re: cross routing"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
Date: Fri, 11 Jun 2004 00:33:17 +0000 (UTC)
On 10 Jun 2004, Pascal Bourguignon <spam@thalassa.informatimago.com> wrote:
>
> Here is my problem:
>
> 2.2.2.1 +--------------+
> Internet------------------| Remote Linux |
> | +--------------+
> | |
> | |
> | VPN via Internet
> | |
> | | 2.2.2.129
> +-------------+ +-------------+
> | ADSL Router | | Local Linux |
> +-------------+ +-------------+
> | 1.1.1.1 | 1.1.1.2
> ---------------+---------------+-----------+--------
> | 2.2.2.130
> +----------+
> | Local WS |
> +----------+
>
>
> I've got a local LAN with a few public IP (1.1.1.*),
> and a remote LAN with other public IP (2.2.2.128/25).
>
> On the local LAN, I've got some workstation on a subnet of the remote
> LAN (a range 2.2.2.128/25), this subnet is bridged thru a VPN between
> the "Local Linux" box and the "Remote Linux" box.
>
> The problem is how to set up the "Local Linux" box so as to route
> packages coming from the local 2.2.2.128/25 range to "Remote Linux"
> via the VPN, while at the same time keeping the default route for this
> "Local Linux" thru the 1.1.1.1 ADSL Router (the local Internet
> connection)?
>
> The local (1.1.1.*) traffic should be routed locally, while the remote
> range (2.2.2.128/25) should be routed thru the VPN.
Just curious if proxy arp would work for a vpn? In other words if route
for ipsec0 covered 2.2.2.128/25 and assuming eth0 is 2.2.2.1, would eth0
answer for ipsec0 IPs, assuming that iptables allowed it and:
echo "1" > /proc/sys/net/ipv4/conf/eth0/proxy_arp
I enable proxy_arp on /24 eth0 LAN interface, so main LAN does not need a
gateway to find /29 wireless subnet on eth1 (eth0 answers arp for eth1
IPs). But I have not tried proxy_arp for a vpn.
-- David Efflandt - All spam ignored http://www.de-srv.com/
- Next message: flap flop: "ssh host login problem"
- Previous message: Mark Voss: "Re: Address already in use error"
- In reply to: Pascal Bourguignon: "cross routing"
- Next in thread: Antoine EMERIT: "Re: cross routing"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
Relevant Pages
|
