FreeS/WAN - Routing all traffic (0.0.0.0) through a client tunnel
From: Kevin Thorley (elron8711@hotmail.com)Date: 02/20/02
- Next message: Marc Greene: "Re: telnet or ssh over local network"
- Previous message: Hal Burgiss: "Re: xtreelic !"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
From: elron8711@hotmail.com (Kevin Thorley) Date: 20 Feb 2002 08:28:22 -0800
This is a message I posted to comp.os.linux.networking.... I thought
this group might be a better place for it.
Hello everyone... I'm hoping someone can give me some insight into a
project I am working on. I would like to set up my home network with
the following config:
---firewall---
home_lan-----router---< > --- WAN (ISP)
---freeswan---
I have 2 static IP's, so both the firewall and vpn device are
accessible from the internet. i understand how to set up a basic
branch office in this configuration, and how to set up a basic client
connection. What I would like to know however, is it possible to set
the client to forward ALL traffic through the tunnel? In effect, I
want the client to be subject to the same rules as the rest of the LAN
(in other words, all client traffic goes through the firewall).
I have experience with this type of configuration using a Nortel
Contivity switch, but have never tried it with freeswan. with the
Nortel device, anything that comes in through the tunnel is dumped out
onto the private network, would go through the LAN router, and then on
to the firewall and back out to the internet. Is this how freeswan
works? do i need to do any specific configuration?
an example... the user types in a request for CNN.com. The request is
placed in a packet and pushed through the tunnel (as is all traffic).
the packet gets to the other end of the tunnel, is un-encapsulated,
and then.... where does it go? does freeswan forward it out the
public interface or private interface?
i hope this is all not too confusing to read, though I think it may
be. any help is appreciated.... thanks!!
Kevin Thorley
- Next message: Marc Greene: "Re: telnet or ssh over local network"
- Previous message: Hal Burgiss: "Re: xtreelic !"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
