<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=ISO-8859-1">
</head>
<body bgcolor="#FFFFFF" text="#000000">
Folks,<br>
<br>
I can't get a routing issue fixed on moon.<br>
MOON has 2 NICs. <br>
ETH0 -- DHCP Client<br>
ETH1 -- Static (10.0.0.1/24)<br>
<br>
<br>
The tunnel between SUN and MOON is up and working.<br>
The issue is routing on MOON.<br>
<br>
From the SUN network I can access any server fine over the tunnel on
the 10.0.0.0 network.<br>
The servers on the 10.0.0.0 network can't access the 192.168.200.0
network back here at SUN.<br>
<br>
This was working in both directions TO I enabled IPTABLES FORWARDING
on moon.<br>
ETH0 on MOON is a path directly to the internet.<br>
<br>
Servers on the 10.0.0.0 network behind MOON can surf the internet
fine and MOON acts as default gateway.<br>
<br>
THE PROBLEM --- When the traffic destination is for 192.168.200.0 it
should route to the tunnel and NOT eth0.<br>
All other outbound traffic should use the local ISP connection ETH0.<br>
<br>
Has anyone setup this before???<br>
Any ideas?<br>
<br>
In the routing table below --- there is no ROUTE to the
192.168.200.0 network ---- How can i add route, but say use TUNNEL
not interface????<br>
<br>
<br>
<u><b>MOON IPTABLES</b></u><br>
<br>
<blockquote>[root@localhost ~]# iptables -L<br>
<br>
Chain INPUT (policy ACCEPT)<br>
target prot opt source destination<br>
<br>
Chain FORWARD (policy ACCEPT)<br>
target prot opt source destination<br>
ACCEPT all -- anywhere anywhere<br>
<br>
Chain OUTPUT (policy ACCEPT)<br>
target prot opt source destination<br>
<br>
[root@localhost ~]#<br>
</blockquote>
<br>
<br>
<small><u><b><big>MOON IPSEC.CONF</big></b></u></small><br>
<br>
<blockquote>[root@localhost ~]# cat /etc/strongswan/ipsec.conf<br>
<br>
config setup<br>
<br>
conn %default<br>
ikelifetime=60m<br>
keylife=20m<br>
rekeymargin=3m<br>
keyingtries=1<br>
authby=secret<br>
keyexchange=ikev2<br>
mobike=no<br>
<br>
<br>
conn net-net<br>
leftsubnet=10.0.0.0/24<br>
leftid=@Site1<br>
leftfirewall=yes<br>
right=sun.domain.com<br>
rightsubnet=192.168.200.0/24<br>
rightid=@NOC<br>
auto=start<br>
<br>
[root@localhost ~]#<br>
<br>
<br>
</blockquote>
<u><b>Moon Route Table</b></u><br>
<br>
[root@localhost ~]# route<br>
<br>
Kernel IP routing table<br>
Destination Gateway
Genmask Flags Metric
Ref Use Iface<br>
192.168.201.128 *
255.255.255.128 U 0
0 0 eth0<br>
10.0.0.0 *
255.255.255.0 U 0
0 0 eth1<br>
link-local *
255.255.0.0 U 1002
0 0 eth0<br>
link-local
*
255.255.0.0 U 1003
0 0 eth1<br>
default 192.168.201.254
0.0.0.0 UG 0
0 0 eth0<br>
<br>
<br>
<br>
<blockquote><br>
</blockquote>
<br>
</body>
</html>