This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Advanced IPSec Tunnel

Hi all,

this is what I want to achieve:

Site A Site B
|
|
|
|
Client with Astaro SSL Client

Site A and B have a site2site IPSec Tunnel.
Clients have already access to Site A.
Now I must have a solution where clients can access Site A and Site B by using SSL Client.

How to do this ?

Regards,

Alex

This thread was automatically locked due to age.

0 alasc over 17 years ago in reply to BarryG

LAN on Site B has PF rules which allows accessing IPSEC Pool.
In general LAN on Site B is allowed to access ANY.

Regards
Alex
Cancel
Vote Up 0 Vote Down

Cancel
0 BarryG over 17 years ago in reply to alasc

And you have a rule on site B for Incoming traffic from the pool on A?

Barry
Cancel
Vote Up 0 Vote Down

Cancel
0 alasc over 17 years ago in reply to BarryG

Here are my rules

Site A

LAN -> ANY -> ANY
IP-SecPool SSL -> ANY -> ANY

Site B

LAN -> ANY -> ANY

Must there be something else ?

Regards,

Alex
Cancel
Vote Up 0 Vote Down

Cancel
0 BarryG over 17 years ago in reply to alasc

I believe you need a rule on B to allow traffic from A's IPSec pool.

Source: A's IPSec pool
Dest: B's LAN?
Allow

Barry
Cancel
Vote Up 0 Vote Down

Cancel
0 alasc over 17 years ago in reply to BarryG

OK,

just did it. But the result is same. No tracert from IpSecPool -> LAN Site B and vice versa.

On both ASL´s there´re no drops in packetfilter.

Regards,

Alex
Cancel
Vote Up 0 Vote Down

Cancel