[strongSwan] Transparently route all packets through a IPSEC tunnel - is this possible?

[Michael O Holstein]

AFIK to do layer2 stuff (like DHCP) you will need to do something like GRE or L2TP (which you can then encapsulate in IPSEC).


Regards,


Michael Holstein

Cleveland State University

________________________________
From: users-bounces at lists.strongswan.org <users-bounces at lists.strongswan.org> on behalf of Carsten Schlote <c.schlote at konzeptpark.de>
Sent: Thursday, February 11, 2016 10:58 AM
To: users at lists.strongswan.org
Subject: [strongSwan] Transparently route all packets through a IPSEC tunnel - is this possible?


Hi,



I need some help with the follwing question:



The idea is to forward all packets received on a given local interface or bridge interface to some other network over an IPSEC tunnel instead of using the default route. The other network will handle DHCP, DNS and sends appropriate packets back over the tunnel, as well it will serve as the default route.



Is it possible to route  packets that way with an IPSEC tunnel?



Or do I need some kind of DHCP proxy on the local interface, so that DHCP requests could be indirectly forwarded to some host behind the IPSEC tunnel?  That way the systems connected to the local interface could configure an IP and could be matched to the local side of the IPSEC tunnel. The DHCP answer would also configure a default route to some system behind the IPSEC tunnel.



Is this possible?



Any help, hints or weblink would be appreciated.



Regards

Carsten












-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.strongswan.org/pipermail/users/attachments/20160211/4aad7778/attachment.html>