This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Use remote gateway??

I've successfully set up a site-to-site IPSEC VPN.  Now I want site B to use the gateway on site A.  The VPN is actually buffering a wireless link between two adjacent buildings, and the second building does not have it's own internet connection.  Thus the site B needs to use site A's internet connection for web browsing, etc.

site B:  192.168.2.0
site A:  172.16.0.0
intermediate net:  192.168.3.0

Internal interface of Astaro box at site B:  192.168.2.100

Internal interface of Astaro box at site A:  172.16.0.97

Gateway at site A:  172.16.0.1 (this is also an Astaro box.)

How can I make this work??

This thread was automatically locked due to age.

0 bagira over 21 years ago

The easiest way is to set up the http proxy on side A to allow network B access to the internet of side A. Then take the clients of network B in the Allwowed networks of the HTTP Proxy and create a packet filter on side B, to allow network B to use the proxy port on side A.
Changing the gateway is not a good idea. In addition the gateway wouldn´tbe in the same subnet and you will get problems with routing.
/bagira
Cancel
Vote Up 0 Vote Down

Cancel
0 BertJanssen over 21 years ago

Hi u can route all traffic trough the tunnel by setting the remote network to Any on the "B" side firewall and set local subnet on the "A" side to Any this will route everything trough it so u can make masq rules etc. on A
Cancel
Vote Up 0 Vote Down

Cancel
0 gborden1 over 21 years ago in reply to BertJanssen

thanks Bert, that did it.
Cancel
Vote Up 0 Vote Down

Cancel