News: This forum is now permanently frozen.
Pages: [1]
Topic: Routing all traffic through IPSEC tunnel using Shre Soft VPN client  (Read 7376 times)
« on: April 08, 2010, 15:33:28 »
yonailo *
Posts: 25

Hi guys,

I can not make this work, I can successfully establish the tunnel and I can ping to the remote IP LAN, but the settings to route all traffic through the VPN with Shrew Soft VPN Client does not seem to work for me.

Can anybody else try it and report if he/she also experiences the same problem ?

Perhaps it is a problem of the Shrew Soft VPN Client, I reallly do not know!

Thanks in advance.

JFRH
« Reply #1 on: June 20, 2012, 14:19:43 »
yonailo *
Posts: 25

Hey guys,

I've also fixed this issue, wooo hooo Smiley

The right thing to do is, in the "Policy" tab, we do not select "Obtain Topology Automatically or Tunnel All".

Afterwards we need to install two manual routes.
type: include, address: 0.0.0.0 netmask: 0.0.0.0
type: exclude, addresse: <your_monowall_public_address>, netmask: 255.255.255.255

With these two rules, all traffic will be redirected through the VPN tunnel, except for the public addresse of Monowall, this seems to be required to not break the tunnel.

Of course, this topic is also related:
http://forum.m0n0.ch/index.php/topic,4601.0.html#msg14130
(If the ADSL router is in face of Monowall, the ADSL router must contain a route for the private adresse of the IPSec client, to fix the reverse path.).

Hope this helps.

JFRH
« Reply #2 on: October 05, 2012, 03:29:47 »
chris.lee *
Posts: 7

Moreover there is a good config guide @ http://www.shrew.net/support/wiki/HowtoMonowall  too.

Aside above setting , it may also require to enable its  NAT Traversal Mode  if encountered these Problems with IPSEC .
« Last Edit: October 05, 2012, 03:31:55 by chris.lee »
 
Pages: [1]
 
 
Powered by SMF 1.1.20 | SMF © 2013, Simple Machines