Print

Please login or register.
1 Hour 1 Day 1 Week 1 Month Forever
Login with username, password and session length

[Brasse]

Hello!

I am trying to setup a static route over an IPSEC VPN tunnel.

So.. we have two offices, one in Sweden and one in Estonia, that we have connected with IPSEC VPN (2*DFL-800). And that tunnel works great.

So basicly we have 2 nets.
Sweden: 192.168.1.0/24
Estonia:  192.168.21.0/24
And two different IP-addresses (to the internet) lets say for example:
Sweden: 11.11.11.11
Estonia: 22.22.22.22

What i am trying to accomplish is that when a computer in sweden(11.11.11.11) connects to a specific IP on the internet(lets say 33.33.33.33), that computer should show up as 22.22.22.22 on 33.33.33.33's log file.

Basicly i want to use the internet connection in Estonia from Sweden, when i am connecting to a specific computer(IP) on the internet.





StaticTarget_net would in this case be 33.33.33.0/24


Theese settings does not work, and i cant figure out where i've gone wrong..

Here is a snippet from the log file:     (192.168.1.110 is my computer from which i did a traceroute)

Code: [Select]

[2011-02-03 09:19:24] FW: IP_PROTO: prio=3 id=07000014 rev=1 event=ttl_low action=drop ttl=1 ttlmin=5 rule=TTLOnLow recvif=lan srcip=192.168.1.110 destip=33.33.33.33 ipproto=UDP ipdatalen=40 srcport=34322 destport=33435 udptotlen=40

Could someone please help?

[juanjo]

Hello:

I'm not sure but check this:

Goto Sweden

1.- Delete routes created by your self.
2.- Goto Interfaces->Ethernet->Lan
3.- In the configuration on the Lan interface, configure Default Gateway of the Lan interface to the local IP address of the firewall of the Estonia.

Good Luck

[Brasse]

That would make all internet traffic go through the internet connection in Estonia, that would be a nightmare.


i want all internet traffic to ONE specific IP-address to go through the internet connection in estonia, not ALL internet traffic.

[juanjo]

That would make all internet traffic go through the internet connection in Estonia, that would be a nightmare.


i want all internet traffic to ONE specific IP-address to go through the internet connection in estonia, not ALL internet traffic.

Ohh, excuse me.

I misunderstood you, sorry please

[Brasse]

No harm done, no need to excuse yourself .. thanks for the effort though