RE: Routing between VPN subnets
"Mark" <[email protected]> Wed, 8 Dec 2004 09:39:38 -0800
| Newsgroups | gmane.comp.encryption.cipe |
|---|---|
| Message-ID | <054c01c4dd4c$e526e140$b5d501cc@dragonfly> |
Yeah, I guess either that or configuring the routing on each node separately rather than just in the router. That would be ok too as long as everything is batch-configured automatically using cfengine or other tools, so I don't have to change each node manually in case changes are needed in the future... Thanks, MARK > -----Original Message----- > From: [email protected] [mailto:[email protected]] On > Behalf Of Claus Grill > Sent: Wednesday, December 08, 2004 12:01 AM > To: [email protected] > Subject: Re: Routing between VPN subnets > > > Hi, > > > * > > What do I have to do to fix this problem? I figured it > would be easiest to > > just have the origin node use its VPN address as origin > address rather than > > its official address - the question is how do I do that? I > tried changing > > the subnet mask of location A to /16 rather than /24, but > that didn't > > change anything. > > * > > Maybe SNAT to the desired IP on both ends solves your > Problem. That way the > one side won't get to see the real official IP of the other. > > Greetings, > > Claus > > -- > Message sent by the [email protected] mailing list. > Unsubscribe: mail [email protected], "unsubscribe cipe-l" in body > Other commands available with "help" in body to the same address. > CIPE info and list archive: > <URL:http://sites.inka.de/~bigred/devel/cipe.html> > -- Message sent by the [email protected] mailing list. Unsubscribe: mail [email protected], "unsubscribe cipe-l" in body Other commands available with "help" in body to the same address. CIPE info and list archive: <URL:http://sites.inka.de/~bigred/devel/cipe.html>