Routing packets to IPsec tunnel
i have following situation. I have 2 servers with public IP and i created IPsec site-to-site VPN. On 2nd server i am running OpenVPN server. How can i force 1st server that packets destined for OpenVPN are forced into the ipsec tunnel? IPsec is configured in transport mode.
If I get you right, what you do is add a route on Server1.
* OpenVPN uses adresses 10.10.10.1 - 10.10.10.23/24
* Ip on Server2 for ipsec: 192.168.10.2
On Server1 you add a route to 10.10.10.0/24 via 192.168.10.2
The command, not tested taken from memory! "route add -net 10.10.10.0 netmask 255.255.255.0 192.168.10.2"
Server2 should already know about the OpenVPN network so nothing need to be done there.
Also, if there are other networks behind OpenVPN on Server2 then add them in the same way. Like "route add -net 172.16.5.0 netmask 255.255.255.0 192.168.10.2"
Last edited by x; 05-18-2013 at 05:11 PM.
In pingvino veritas!