Greetings all,

I have two Endian community edition firewalls and am using OpenVPN
Net2Net in routed mode to connect a branch office to the main office.
Here is my network...

194.0.0.0/24 -- main_fw -- Internet -- branch_fw -- 10.0.0.0/24

The IPs have been changed to protect the little bits, but the main
office really does have a public class C IP range that we keep private,
and the branch office really does subnet a class A private network.

I've stepped through the OpenVPN Net2Net setup.  The main_fw acts as the
server.  The branch_fw acts as the client and connects successfully.
Pings are successful from a host on the main 194.0.0.0/24 network to a
host on the branch 10.0.0.0/24 network, but not visa versa.

Pings from a host on the branch 10.0.0.0/24 network to a host on the
main 194.0.0.0/24 network fail.  However, if I logon to the branch_fw
via SSH and attempt the same ping it succeeds.

The branch_fw is the default route for hosts at that site.

The only other piece of relevant information that comes to mind is that
the branch_fw had previously been configured with an IPSEC connection to
a commercial firewall at the main site.

Any thoughts?

Lane Beneke
Network Administrator
Southern Piping Co.
Wilson, NC, USA

-------------------------------------------------------------------------
This SF.net email is sponsored by the 2008 JavaOne(SM) Conference 
Don't miss this year's exciting event. There's still time to save $100. 
Use priority code J8TL2D2. 
http://ad.doubleclick.net/clk;198757673;13503038;p?http://java.sun.com/javaone
_______________________________________________
Efw-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/efw-user

Reply via email to