sonjaya wrote:

[Trimmed for length]
---------------------------------------------------------------
======================================
I can akses comp in net_a from net_b ( ping running application etc)
I can remote comp in net_b from net_a ( ping , remote , print (
jetdirect ), etc )
I can remote desktop citrix in net_a to net_c
=======================================
Then i want net_b can acces remote citrix in net_c , so i made static routing :
--- 192.168.1.3 ping statistics ---
2 packets transmitted, 2 packets received, 0.0% packet loss
round-trip min/avg/max/std-dev = 3.759/3.906/4.054/0.160 ms

#route add 172.16.0.0/16 192.168.1.3
#error network can be reached

so how i cant made net_c access able from net_b ?

        That route isn't correct.

Create a IPsec tunnel between the net_c and net_b gateways. That would be the best way, rather than trying to get it to route
through both tunnels.

Additionally, in the current configuration, your encryption domains from net_b to net_a and from net_a to net_c don't include net_c to net_b traffic. Nothing will get encapsulated and encrypted.

for detail my network please see in
http://sonjaya.web.id/boboko/vpnsitensite.pdf

That was actually very helpful, your email description wasn't entirely clear.


--
Joseph Bender
Bendorius Consulting
P: 248-434-5580
F: 248-434-5581
jcbender at bendorius com

Reply via email to