routing to a second router with PF
From: David Magda (dmagda+trace040726_at_ee.ryerson.ca)
Date: 08/30/04
- Next message: Peter Matulis: "Re: Restarting ADSL Connection Problem"
- Previous message: Dave Uhring: "Re: OpenBSD stole code from SCO (for real!)"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
Date: 30 Aug 2004 10:55:54 -0400
Hello,
I would like to know whether the following scenario is possible with
OpenBSD (3.3, for now):
Machine(s) ----|
| Client's
|--- OBSD GW ------- Internet ---- VPN GW
|
Linksys VPN --|
Router
A client of ours wants us to connect to their internal network
(maintenance / monitoring) through a VPN instead of using SSH. I need
to know whether it is possible to have the internal machines send
regular packets to the OBSD GW, have it redirect them to a Linksys
VPN router (which encrypts the packets), and send the IPsec packets
to the client's VPN GW. The internal machines run Windows XP (WXP)
Home.
Replies from the client's VPN GW should also back through this
convoluted path.
Another option be to attempt give the WXP boxes another route through
DHCP: send all packets for the client's internal network to the
Linksys VPN without hitting the OpenBSD GW.
It is technically possible, but it would probably be less hassle to
try to get OpenBSD routing working than messing with Windows routing
(I'm don't have much experience with advanced Windows features).
Thanks for any info.
P.S. I know OBSD GW can do IPsec very well, but for now I'm using
with the Linksys. (Mostly because the OBSD GW is probably
underpowered for IPsec (Pentium 200 MHz, 64MB RAM).) The Linksys
would also do some NATing so the client wouldn't really be able to go
back into our network.
-- David Magda <dmagda at ee.ryerson.ca>, http://www.magda.ca/ Because the innovator has for enemies all those who have done well under the old conditions, and lukewarm defenders in those who may do well under the new. -- Niccolo Machiavelli, _The Prince_, Chapter VI
- Next message: Peter Matulis: "Re: Restarting ADSL Connection Problem"
- Previous message: Dave Uhring: "Re: OpenBSD stole code from SCO (for real!)"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
Relevant Pages
|
