News: This forum is now permanently frozen.
Pages: [1]
Topic: Tunnel to multiple, discontinous subnets  (Read 2436 times)
« on: May 08, 2007, 10:07:23 »
NetMan *
Posts: 3

Hello,
can someone help me?
I want to build up a tunnel between 2 M0n0walls with discontinous IP- subnets on one site.

Where can i config that?

« Reply #1 on: May 08, 2007, 13:42:00 »
ciarocci *
Posts: 7

If you're talking about IPSEC, then you have to set up an individual tunnel for each discontinuous subnet.  I've done the same thing and it works perfectly.
« Reply #2 on: May 09, 2007, 19:08:35 »
NetMan *
Posts: 3

Thank you.
That is too simple....

My main VPN-Gateway is a GB-Flash from GTA.  With this gateway i can put various IPs into one tunnel
I can't create separate IPSec connections for each subnet.

Now my next problem: does someone know how to connect a GTA Firewall to a M0n0wall with a site to site VPN with the need of some discontinous subnets? VPN with one subnet is working fine with IKE and IPSec.

« Reply #3 on: May 09, 2007, 22:52:20 »
ciarocci *
Posts: 7

I don't think that is possible.  m0n0wall requires a separate tunnel for each subnet.  I was faced with the same problem, but I had a Cisco PIX on the other end and it allowed for multiple tunnels so it worked out.  You might have to look at the documentation for KAME (I think that is what is used in m0n0wall for IPSec VPNs) and see if what you are doing is possible.  Then you'll probably have to configure it manually in the config file.

Chris
« Reply #4 on: May 15, 2007, 16:38:13 »
NetMan *
Posts: 3

Thank you ciarocci,
that wasn't what i hoped do get.
But I'll see

Mike
 
Pages: [1]
 
 
Powered by SMF 1.1.20 | SMF © 2013, Simple Machines