Re: Multiple vpn tunnels

said.abdel@xxxxxxxxx wrote:
Hello Folks,

I have the following situation:

VPN Tunnel 1 VPN Tunnel 2
81.129.39.9 ============ 59.20.93.49 ============= 93.48.28.27
Gateway A Gateway
B Gateway C

I need all clients coming from gateway C to be able to use the vpn
tunnel 1, so I have the following rule on Gateway B:

iptables -t nat -A POSTROUTING -s 93.48.28.27 -d 81.129.40.0/24 -o
eth0 -j MASQUERADE

But does not work, what I'm missing here?

Note: doing tcpdump host 93.48.28.27 on Gateway B and trying to ping
or telnet from Gateway C seems to work. I don't have access to Gateway
A, so I can't verify if the packets get to Gateway A.

I would really appreciate if you can help me fix this or find an other
job ;)


The masquerade may be an overkill, unless you need to limit
the visibility of the subnets to the other end of the tunnel.

Did you:

- tell gateway A that VPN tunnel 2 is reachable via VPN tunnel 1?
- tell VPN tunnel 2 end that gateway A and the nets behind it
are reachable via gateway C?
- enable forwarding at gateway C?

--

Tauno Voipio
tauno voipio (at) iki fi
.

Relevant Pages

  • Re: Possible to secure WEP?
    ... A VPN is a tunnel. ... A tunnel with only one end is a cave. ... Your gateway IP address is 192.168.1.1. ... you connect to a remote VPN server. ...
    (alt.internet.wireless)
  • Re: IPSEC config
    ... Have you used ifconfig to setup the inside points of your gif tunnel? ... gifconfig only sets the outside IP addresses of your security gateways. ... Gateway A: ...
    (FreeBSD-Security)
  • Symantec Firewall/VPN 100
    ... I intend to connect two offices via broadband connections using the Symantec ... These allow gateway to gateway VPN ... Once I have established a secure tunnel between the Symantec gateways, ...
    (comp.security.firewalls)
  • Re: gateway doesnt locate at the same subnet of the IP Address.
    ... Namely a VPN / tunnel is established from the local IP to a remote IP and then using the remote IP of the VPN / tunnel as the default gateway. ...
    (comp.os.linux.misc)
  • Re: can internet gateway be on opposite side of a tunnel?
    ... > Can a machine use a host on the opposite side of an ipip tunnel as its ... > I have 2 LANs, a gateway in each, and an ipip tunnel between the ... A host in either LAN designates its local tunnel endpoint as ...
    (comp.os.linux.networking)