<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style type="text/css" style="display:none;"><!-- P {margin-top:0;margin-bottom:0;} --></style>
</head>
<body dir="ltr">
<div id="divtagdefaultwrapper" style="font-size:12pt;color:#000000;background-color:#FFFFFF;font-family:Calibri,Arial,Helvetica,sans-serif;">
<p>AFIK to do layer2 stuff (like DHCP) you will need to do something like GRE or L2TP (which you can then encapsulate in IPSEC).</p>
<p><br>
</p>
<p>Regards,</p>
<p><br>
</p>
<p>Michael Holstein</p>
<p>Cleveland State University<br>
</p>
<div style="color: rgb(49, 55, 57);">
<hr tabindex="-1" style="display:inline-block; width:98%">
<div id="divRplyFwdMsg" dir="ltr"><font style="font-size:11pt" face="Calibri, sans-serif" color="#000000"><b>From:</b> users-bounces@lists.strongswan.org <users-bounces@lists.strongswan.org> on behalf of Carsten Schlote <c.schlote@konzeptpark.de><br>
<b>Sent:</b> Thursday, February 11, 2016 10:58 AM<br>
<b>To:</b> users@lists.strongswan.org<br>
<b>Subject:</b> [strongSwan] Transparently route all packets through a IPSEC tunnel - is this possible?</font>
<div> </div>
</div>
<div>
<div style="">
<p style="margin: 0cm 0cm 0.0001pt; font-size: 11pt; font-family: "Calibri",sans-serif;">
Hi,</p>
<p style="margin: 0cm 0cm 0.0001pt; font-size: 11pt; font-family: "Calibri",sans-serif;">
</p>
<p style="margin: 0cm 0cm 0.0001pt; font-size: 11pt; font-family: "Calibri",sans-serif;">
I need some help with the follwing question:</p>
<p style="margin: 0cm 0cm 0.0001pt; font-size: 11pt; font-family: "Calibri",sans-serif;">
</p>
<p style="margin: 0cm 0cm 0.0001pt; font-size: 11pt; font-family: "Calibri",sans-serif;">
The idea is to forward all packets received on a given local interface or bridge interface to some other network over an IPSEC tunnel instead of using the default route. The other network will handle DHCP, DNS and sends appropriate packets back over the tunnel,
as well it will serve as the default route.</p>
<p style="margin: 0cm 0cm 0.0001pt; font-size: 11pt; font-family: "Calibri",sans-serif;">
</p>
<p style="margin: 0cm 0cm 0.0001pt; font-size: 11pt; font-family: "Calibri",sans-serif;">
Is it possible to route packets that way with an IPSEC tunnel?</p>
<p style="margin: 0cm 0cm 0.0001pt; font-size: 11pt; font-family: "Calibri",sans-serif;">
</p>
<p style="margin: 0cm 0cm 0.0001pt; font-size: 11pt; font-family: "Calibri",sans-serif;">
Or do I need some kind of DHCP proxy on the local interface, so that DHCP requests could be indirectly forwarded to some host behind the IPSEC tunnel? That way the systems connected to the local interface could configure an IP and could be matched to the local
side of the IPSEC tunnel. The DHCP answer would also configure a default route to some system behind the IPSEC tunnel.</p>
<p style="margin: 0cm 0cm 0.0001pt; font-size: 11pt; font-family: "Calibri",sans-serif;">
</p>
<p style="margin: 0cm 0cm 0.0001pt; font-size: 11pt; font-family: "Calibri",sans-serif;">
Is this possible?</p>
<p style="margin: 0cm 0cm 0.0001pt; font-size: 11pt; font-family: "Calibri",sans-serif;">
</p>
<p style="margin: 0cm 0cm 0.0001pt; font-size: 11pt; font-family: "Calibri",sans-serif;">
Any help, hints or weblink would be appreciated.</p>
<p style="margin: 0cm 0cm 0.0001pt; font-size: 11pt; font-family: "Calibri",sans-serif;">
</p>
<p style="margin: 0cm 0cm 0.0001pt; font-size: 11pt; font-family: "Calibri",sans-serif;">
Regards</p>
<p style="margin: 0cm 0cm 0.0001pt; font-size: 11pt; font-family: "Calibri",sans-serif;">
Carsten</p>
<p style="margin: 0cm 0cm 0.0001pt; font-size: 11pt; font-family: "Calibri",sans-serif;">
</p>
<p style="margin: 0cm 0cm 0.0001pt; font-size: 11pt; font-family: "Calibri",sans-serif;">
</p>
<p style="margin: 0cm 0cm 0.0001pt; font-size: 11pt; font-family: "Calibri",sans-serif;">
</p>
<p style="margin: 0cm 0cm 0.0001pt; font-size: 11pt; font-family: "Calibri",sans-serif;">
</p>
<p style="margin: 0cm 0cm 0.0001pt; font-size: 11pt; font-family: "Calibri",sans-serif;">
</p>
<p style="margin: 0cm 0cm 0.0001pt; font-size: 11pt; font-family: "Calibri",sans-serif;">
</p>
</div>
</div>
</div>
</div>
</body>
</html>