Hello,
I have 4 subnets connected via Astaro 220's with IPSec tunnels. 3 are on one side of the link, one on the other.
Remote End:
172.16.30.0 - LAN
172.16.100.0 - DMZ
10.0.2.0 - iSCSI
Local:
172.16.20.0
All are on a /24.
When I run a traceroute from 172.16.20.xx to 172.16.30.xx it takes this path...
hop 1 - 172.16.20.1
hop 2 - 10.0.2.1
hop 3 - 172.16.30.xx
I don't want this route, so I tried static routing and policy based routing, my goal is traffic bound for the 30 network would hit the 30 gateway. Same behavior would be expected for the other networks. The only time I want to see it routing to 10.0.2.1 is when the traffic is bound for the 10.0.2.0/24 network. So far Astaro support has no clue, saying it will just pick a random route, this seems silly to me for a firewall to just choose on a whim.
Can anyone offer a solution?
Thanks,
Keith
This thread was automatically locked due to age.