IPSec VPN routingHow do I set up routing for a VPN gateway separate from my main gateway?Routing for IPSec tunnelSharing a VPN connection among several servers with certain IP rangesIPSec VPN gateway solution?How do I route a public IP range over an IPSEC VPN?AWS StrongSwan IPSec VPNRouting between pfSense Subnets and IPSec VPNStatic routing between LAN, IPSec and VPNIPSec between Palo Alto and Strong Swan - traffic between tunnel endpoint IPs (used for ESP transport) should pass through tunnelPrivate networks routing over IPSEC VPN
SafeCracker #3 - We've Been Blocked
Should homeowners insurance cover the cost of the home?
What is the solution to this metapuzzle from a university puzzling column?
Can there be a single technologically advanced nation, in a continent full of non-technologically advanced nations?
How do inspiraling black holes get closer?
How can I get a job without pushing my family's income into a higher tax bracket?
29er Road Tire?
Uniform boundedness of the number of number fields having fixed discriminant
Word for Food that's Gone 'Bad', but is Still Edible?
Should I dumb down my writing in a foreign country?
Are pressure-treated posts that have been submerged for a few days ruined?
What are the advantages of luxury car brands like Acura/Lexus over their sibling non-luxury brands Honda/Toyota?
How to safely wipe a USB flash drive
Upside-Down Pyramid Addition...REVERSED!
Pressure inside an infinite ocean?
Nominativ or Akkusativ
Did the manned NASA capsules rotate during descent?
Can you Ready a Bard spell to release it after using Battle Magic?
Are there any of the Children of the Forest left, or are they extinct?
Out of scope work duties and resignation
exec command in bash loop
How to increase the size of the cursor in Lubuntu 19.04?
Target/total memory is higher than max_server_memory
IP addresses from public IP block in my LAN
IPSec VPN routing
How do I set up routing for a VPN gateway separate from my main gateway?Routing for IPSec tunnelSharing a VPN connection among several servers with certain IP rangesIPSec VPN gateway solution?How do I route a public IP range over an IPSEC VPN?AWS StrongSwan IPSec VPNRouting between pfSense Subnets and IPSec VPNStatic routing between LAN, IPSec and VPNIPSec between Palo Alto and Strong Swan - traffic between tunnel endpoint IPs (used for ESP transport) should pass through tunnelPrivate networks routing over IPSEC VPN
.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty height:90px;width:728px;box-sizing:border-box;
This is supposed to be a pretty simple question but I couldn't google a answer for it!
I have a ipsec VPN tunnel established between 1.1.1.1 and 2.2.2.2 (public IPs). The first machine (1.1.1.1) has a LAN with gateway 10.253.0.93. Inside this LAN, there is a machine with IP 172.21.83.60 (the gw already has the rules to forward traffic from 10.252.0.93 to 172.21.83.60).
In machine 2.2.2.2, I'm able to ping 10.252.0.93 normally. That's prove that the VPN is correctly established.
My question is: what I need to do in order to be able to ping machine 172.21.83.60 from 2.2.2.2? I tried to add a route using command:
route add -net 172.21.83.0 netmask 255.255.255.0 gw 10.253.0.93
but got:
SIOCADDRT: No such process
vpn iptables ipsec route
asked Mar 1 '13 at 19:07
danielnovydanielnovy
11
add a comment |
This is supposed to be a pretty simple question but I couldn't google a answer for it!
I have a ipsec VPN tunnel established between 1.1.1.1 and 2.2.2.2 (public IPs). The first machine (1.1.1.1) has a LAN with gateway 10.253.0.93. Inside this LAN, there is a machine with IP 172.21.83.60 (the gw already has the rules to forward traffic from 10.252.0.93 to 172.21.83.60).
In machine 2.2.2.2, I'm able to ping 10.252.0.93 normally. That's prove that the VPN is correctly established.
My question is: what I need to do in order to be able to ping machine 172.21.83.60 from 2.2.2.2? I tried to add a route using command:
route add -net 172.21.83.0 netmask 255.255.255.0 gw 10.253.0.93
but got:
SIOCADDRT: No such process
vpn iptables ipsec route
asked Mar 1 '13 at 19:07
danielnovydanielnovy
11
1
You'd need to possibly add a brief pic of the network, including what gear models. Some are as a simply as a router on each end with switch ports built in, others have additional routing, firewalls, accelerators, etc. behind each side, so it is difficult to simply supply an answer without seeing what the layout looks like
– TheCleaner
Mar 1 '13 at 19:21
add a comment |
This is supposed to be a pretty simple question but I couldn't google a answer for it!
I have a ipsec VPN tunnel established between 1.1.1.1 and 2.2.2.2 (public IPs). The first machine (1.1.1.1) has a LAN with gateway 10.253.0.93. Inside this LAN, there is a machine with IP 172.21.83.60 (the gw already has the rules to forward traffic from 10.252.0.93 to 172.21.83.60).
In machine 2.2.2.2, I'm able to ping 10.252.0.93 normally. That's prove that the VPN is correctly established.
My question is: what I need to do in order to be able to ping machine 172.21.83.60 from 2.2.2.2? I tried to add a route using command:
route add -net 172.21.83.0 netmask 255.255.255.0 gw 10.253.0.93
but got:
SIOCADDRT: No such process
vpn iptables ipsec route
asked Mar 1 '13 at 19:07
danielnovydanielnovy
11
This is supposed to be a pretty simple question but I couldn't google a answer for it!
I have a ipsec VPN tunnel established between 1.1.1.1 and 2.2.2.2 (public IPs). The first machine (1.1.1.1) has a LAN with gateway 10.253.0.93. Inside this LAN, there is a machine with IP 172.21.83.60 (the gw already has the rules to forward traffic from 10.252.0.93 to 172.21.83.60).
In machine 2.2.2.2, I'm able to ping 10.252.0.93 normally. That's prove that the VPN is correctly established.
My question is: what I need to do in order to be able to ping machine 172.21.83.60 from 2.2.2.2? I tried to add a route using command:
route add -net 172.21.83.0 netmask 255.255.255.0 gw 10.253.0.93
but got:
SIOCADDRT: No such process
vpn iptables ipsec route
vpn iptables ipsec route
asked Mar 1 '13 at 19:07
danielnovydanielnovy
11
asked Mar 1 '13 at 19:07
danielnovydanielnovy
11
asked Mar 1 '13 at 19:07
danielnovydanielnovy
11
asked Mar 1 '13 at 19:07
danielnovydanielnovy
11
asked Mar 1 '13 at 19:07
danielnovydanielnovy
11
11
1
You'd need to possibly add a brief pic of the network, including what gear models. Some are as a simply as a router on each end with switch ports built in, others have additional routing, firewalls, accelerators, etc. behind each side, so it is difficult to simply supply an answer without seeing what the layout looks like
– TheCleaner
Mar 1 '13 at 19:21
add a comment |
1
You'd need to possibly add a brief pic of the network, including what gear models. Some are as a simply as a router on each end with switch ports built in, others have additional routing, firewalls, accelerators, etc. behind each side, so it is difficult to simply supply an answer without seeing what the layout looks like
– TheCleaner
Mar 1 '13 at 19:21
1
1
You'd need to possibly add a brief pic of the network, including what gear models. Some are as a simply as a router on each end with switch ports built in, others have additional routing, firewalls, accelerators, etc. behind each side, so it is difficult to simply supply an answer without seeing what the layout looks like
– TheCleaner
Mar 1 '13 at 19:21
You'd need to possibly add a brief pic of the network, including what gear models. Some are as a simply as a router on each end with switch ports built in, others have additional routing, firewalls, accelerators, etc. behind each side, so it is difficult to simply supply an answer without seeing what the layout looks like
– TheCleaner
Mar 1 '13 at 19:21
add a comment |
1 Answer
1
active
oldest
votes
What about NAT do you nat your traffic with iptables? You shouldn't do it (traffic that goes to you ipsec tunnel should bypass NAT rule, like this:
iptables -t nat -A POSTROUTING ! -d <ipsec_lan> -j SNAT --to-source <ip>
ipsec vpn in linux makes low-level traffic routing and encryption you can see it with
ip xfrm state
Also, try to chose interface for ping source, might help.
answered May 29 '13 at 5:14
HikaruHikaru
489
add a comment |
Your Answer
StackExchange.ready(function()
var channelOptions =
tags: "".split(" "),
id: "2"
;
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function()
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled)
StackExchange.using("snippets", function()
createEditor();
);
else
createEditor();
);
function createEditor()
StackExchange.prepareEditor(
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader:
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
,
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
);
);
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f483886%2fipsec-vpn-routing%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
1 Answer
1
active
oldest
votes
1 Answer
1
active
oldest
votes
active
oldest
votes
active
oldest
votes
What about NAT do you nat your traffic with iptables? You shouldn't do it (traffic that goes to you ipsec tunnel should bypass NAT rule, like this:
iptables -t nat -A POSTROUTING ! -d <ipsec_lan> -j SNAT --to-source <ip>
ipsec vpn in linux makes low-level traffic routing and encryption you can see it with
ip xfrm state
Also, try to chose interface for ping source, might help.
answered May 29 '13 at 5:14
HikaruHikaru
489
add a comment |
What about NAT do you nat your traffic with iptables? You shouldn't do it (traffic that goes to you ipsec tunnel should bypass NAT rule, like this:
iptables -t nat -A POSTROUTING ! -d <ipsec_lan> -j SNAT --to-source <ip>
ipsec vpn in linux makes low-level traffic routing and encryption you can see it with
ip xfrm state
Also, try to chose interface for ping source, might help.
answered May 29 '13 at 5:14
HikaruHikaru
489
add a comment |
What about NAT do you nat your traffic with iptables? You shouldn't do it (traffic that goes to you ipsec tunnel should bypass NAT rule, like this:
iptables -t nat -A POSTROUTING ! -d <ipsec_lan> -j SNAT --to-source <ip>
ipsec vpn in linux makes low-level traffic routing and encryption you can see it with
ip xfrm state
Also, try to chose interface for ping source, might help.
answered May 29 '13 at 5:14
HikaruHikaru
489
What about NAT do you nat your traffic with iptables? You shouldn't do it (traffic that goes to you ipsec tunnel should bypass NAT rule, like this:
iptables -t nat -A POSTROUTING ! -d <ipsec_lan> -j SNAT --to-source <ip>
ipsec vpn in linux makes low-level traffic routing and encryption you can see it with
ip xfrm state
Also, try to chose interface for ping source, might help.
answered May 29 '13 at 5:14
HikaruHikaru
489
answered May 29 '13 at 5:14
HikaruHikaru
489
answered May 29 '13 at 5:14
HikaruHikaru
489
answered May 29 '13 at 5:14
HikaruHikaru
489
489
add a comment |
add a comment |
Thanks for contributing an answer to Server Fault!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f483886%2fipsec-vpn-routing%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
1
You'd need to possibly add a brief pic of the network, including what gear models. Some are as a simply as a router on each end with switch ports built in, others have additional routing, firewalls, accelerators, etc. behind each side, so it is difficult to simply supply an answer without seeing what the layout looks like
– TheCleaner
Mar 1 '13 at 19:21