openswan routes

Hello,

I have a configuration where I need one tunnel on my
internal network, and another over the internet.  Both
tunnels work.  What I want to do now is to route
packets from the source of the internal tunnel through
the tunnel to my firewall and then through the second
tunnel.  Packets will go through either tunnel, but
they will not go through both.
Tunnels:

192.168.50.0/24 -- <internal corporate network > --
<other internal corporate network> -- 192.168.40.0/24
(works, packets from 192.168.50.x are encrypted and
reach 192.168.40.x)

192.168.40.0/24 -- <internet address my side> --
<internent address remote side> -- 10.10.70.0/24
(works packets from 192.168.40.x reach 10.10.70.x)

I am trying to get packets from 192.168.50.x to
10.10.70.x.

The corporate network also has a route to the
internet, but I have not been able to authenticate
through it, I suspect it blocks some types of packets
that I need to establish the connection.

I am a linux admin; my networking ability is only
fair.  Please let me know if the answer is obvious.

Thank you,

Gordon


__________________________________________________
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection
around 
http://mail.yahoo.com 
_______________________________________________
Usersopenswan.org
http
://lists.openswan.org/mailman/listinfo/users
Building and Integrating Virtual Private Networks with
Openswan: 
http://www.amazon.com/gp/product/1904811
256/104-3099591-2946327?n=283155

On Sun, 15 Apr 2007, dcyspm wrote:

> I have a configuration where I need one tunnel on my
> internal network, and another over the internet.  Both
> tunnels work.  What I want to do now is to route
> packets from the source of the internal tunnel through
> the tunnel to my firewall and then through the second
> tunnel.  Packets will go through either tunnel, but
> they will not go through both.
> Tunnels:
>
> 192.168.50.0/24 -- <internal corporate network >
--
> <other internal corporate network> --
192.168.40.0/24
> (works, packets from 192.168.50.x are encrypted and
> reach 192.168.40.x)
>
> 192.168.40.0/24 -- <internet address my side> --
> <internent address remote side> -- 10.10.70.0/24
> (works packets from 192.168.40.x reach 10.10.70.x)
>
> I am trying to get packets from 192.168.50.x to
> 10.10.70.x.

You will need to create two ipsec tunnels with
leftsubnet=192.168.50.0/24 and rightsubnet=10.10.70.0/24
for each "leg" of the trip. So they will have a
different left/right
combination (one for the inside lan and one for the outside
connection)

Paul
-- 
Building and integrating Virtual Private Networks with
Openswan:
http://www.amazon.com/gp/product/1904811
256/104-3099591-2946327?n=283155
_______________________________________________
Usersopenswan.org
http
://lists.openswan.org/mailman/listinfo/users
Building and Integrating Virtual Private Networks with
Openswan: 
http://www.amazon.com/gp/product/1904811
256/104-3099591-2946327?n=283155