[clug] IPSec Question: Connecting outling sites via single head
office access point
brett at worth.id.au
Sat Oct 2 10:01:36 GMT 2004
On Sat, Oct 02, 2004 at 11:52:37AM +1000, Stephen Hodgman wrote:
> Do I have to establish separate VPN links form A ==> B to do what I want?
No but you do need to establish a connection between A and H that refers to the
subnet on B. and do the same on the B-H configuration to know about A's subnet.
In other words: tell A that B's subnet is behind H.
Once you establish the IPSEC connection from A-H for the B subnet, there will be
a route added on A's route table for B's subnet that points down the ipsec0 tunnel.
This all assumes the routers in question allow this kind on configuration. I've
done this kind of routing with FreeS/WAN.
/) _ _ _/_/ / / / _ _//
/_)/</= / / (_(_/()/< ///
More information about the linux