Re: reach a remote LAN through IPSEC from the router

2014-02-11 Thread andy
Hi, Reading this a bit late but something doesn't sound quite right. Just ignore me if I'm reading this wrong.. An IPSec tunnel policy defines both the local network *and* the remote network. So for a packet to be encrypted it must have both a source IP address within the local subnet and a desti

Re: reach a remote LAN through IPSEC from the router

2014-02-10 Thread Zach Leslie
On Mon, Feb 10, 2014 at 07:58:39PM +0100, Aurelien Martin wrote: > > net.inet.icmp.rediraccept=1 # 1=Accept ICMP redirects > > Good to know this feature :) > > > Are systems behind the firewall able to route to and reach the remote > network? > > Yes all is working. > > > we could route th

Re: reach a remote LAN through IPSEC from the router

2014-02-10 Thread Aurelien Martin
pecifying >>> the -I switch on ping, or -b for ssh. >>> >>> -Ursprüngliche Nachricht- >>>> Von: owner-m...@openbsd.org [mailto:owner-m...@openbsd.org] Im >>>> Auftrag von Aurelien Martin >>>> Gesendet: Montag, 10. Februar 201

Re: reach a remote LAN through IPSEC from the router

2014-02-10 Thread Zach Leslie
;>> Gesendet: Montag, 10. Februar 2014 16:10 >>> An: Mitja Muženič; misc@openbsd.org >>> Betreff: Re: reach a remote LAN through IPSEC from the router >>> >>> >>> Hi Mitja, >>> >>> When I add the route manually it's working l

Re: reach a remote LAN through IPSEC from the router

2014-02-10 Thread Aurelien Martin
Februar 2014 16:10 An: Mitja Muženič; misc@openbsd.org Betreff: Re: reach a remote LAN through IPSEC from the router Hi Mitja, When I add the route manually it's working like a charm. But after that, all machines of my LAN ping with this following form (Redirect Host). What does it mean

Re: reach a remote LAN through IPSEC from the router

2014-02-10 Thread Johan Mellberg
> 10 feb 2014 kl. 16:10 skrev Aurelien Martin <01aurel...@gmail.com>: > > Hi Mitja, > > When I add the route manually it's working like a charm. > > But after that, all machines of my LAN ping with this following form > (Redirect Host). What does it mean ? For me the router rewrite the > desti

Re: reach a remote LAN through IPSEC from the router

2014-02-10 Thread Aurelien Martin
Hi Mitja, When I add the route manually it's working like a charm. But after that, all machines of my LAN ping with this following form (Redirect Host). What does it mean ? For me the router rewrite the destination that create an overhead. $ ping 192.168.10.1 PING 192.168.10.1 (192.168.10.1