RE: VPN between multiple LANs
"Mark" <[email protected]> Wed, 26 Jan 2005 10:38:07 -0800
| Newsgroups | gmane.comp.encryption.cipe |
|---|---|
| Message-ID | <01c501c503d6$317c46c0$b5d501cc@dragonfly> |
Ok, thanks for the information... One other question... If you use the same IP for all cipe adapters, what do you route by? Assuming the gateway in LAN3 is 192.168.103.250, you will get a default routing when you start the cipe tunnel in LAN1 like this: 192.168.103.250/255.255.255.255 -> cipcb3 Now you have to setup the routing to 192.168.103.0/255.255.255.0 Do you route through cipcb3 (device) or through 192.168.103.250(address)? Technically both work - is there a reason why one of them is better than the other? Thanks, MARK > -----Original Message----- > From: Tony Langdon (ATC) [mailto:[email protected]] > Sent: Monday, January 24, 2005 4:37 PM > To: 'Mark'; '[email protected]' > Subject: RE: VPN between multiple LANs > > > > I have configured cipe between 2 networks without problems. > > Now I want to add some more and want to be able to reach any > > one of my LANs from any of the others. > > I routinely have 3 or 4 networks tied together. > > > > So to make it short: > > LAN1<->LAN2 works > > > > Now I also want: > > LAN1<->LAN3 > > LAN2<->LAN3 > > LAN1<->LAN4 > > LAN2<->LAN4 > > LAN3<->LAN4 > > and so on > > Sure.. > > > > What is the easiest way to do this? Does anybody have a > > pointer to some diagram or sample setup? > > Easiest way is to create an options file for each network, > say in /etc/cipe > > options.net1 > options.net2 > options.net3 > > And configure each one as per normal per network. > > Then to setup the links > > ciped-cb -o /etc/cipe/options.net1 > ciped-cb -o /etc/cipe/options.net2 > ciped-cb -o /etc/cipe/options.net3 > > and so on. :) > > > > Assuming I use 192.168.1.0/24 for LAN1, 192.168.2.0/24 for > > LAN2, etc., then looking just at LAN1, I would need one > > dedicated port for each other LAN I want a cipe connection > > to. Or can I use the same port for each connection (I tried, > > but could get it to work)? Can I assign the same IP to all > > cipbcb adapters in LAN1's tunnel end point, or do I need to > > You will need a separate UDP port for each VPN link, but you > can use the same IP address for all connections terminating > on the one host. > > > use a different IP for each of them? Right now I have it > > working by using the same IP for cipcb1 and cipcb2 in LAN1, > > but I am not sure if this will bring any problems that I am > > not aware of yet... > > Works fine for me, it's point to point, so the cipe devices > can use the same IP. That's exactly how I do it. > -- Message sent by the [email protected] mailing list. Unsubscribe: mail [email protected], "unsubscribe cipe-l" in body Other commands available with "help" in body to the same address. CIPE info and list archive: <URL:http://sites.inka.de/~bigred/devel/cipe.html>