Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 3 replies
  • Subscribers 2 subscribers
  • Views 1410 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

[5.101] How to define 2 remote subnet on a VPN ?

pgervaix
I have setup a VPN between 2 firewalls  (mine is Astaro and the other is not) and I would like to be able to access 2 different subnets behind the remote Firewall, through the VPN. 
What I understood is that if you define a "remote subnet" in Subnet definition of the VPN, Astaro will automatically insert a routing rule that tells how to acces this remote subnet (i.e. via the ipsec0 interface). I thought I could disable  the "remote subnet" and setup two routing rules that would point the 2 subnets to the ipsec0 interface but this interface is not accessible in the Astaro interface. Is there another way to do this ?


This thread was automatically locked due to age.
  • 0
    You will have to collect the two subnets into a supernet (example: 192.168.1/24, 192.168.2/24; Supernet=192.168/16). Add the supernet to the VPN configuration for routing purposes....
  • 0 in reply to SecApp
    if you cannot put them together with supernet masks you could setup a second tunnel. Some other vendors offer the possibility to simply add extra networks to an existing tunnel but unfortunately Astaro doesn't offers this flexibility.

    Greetings
    cyclops
  • 0 in reply to cyclops
    Thanks for your reply. If I disable the "remote subnet" and define the 2 routing rules using Astaro console, will they remain in place when I reboot or when I change the configuration of the VPN ?