I'm running into a funny but annoying situation.

 

 

I have an ipsec tunnel setup between two pfsense boxes.  The tunnel is working 
great, and I am allowing my office's /24 network to access a remote datacenters 
/24 public ips through the vpn.

 

The problem is that we have one ip (.103) on the remote network which I need to 
NOT go through the vpn.

 

I've tried playing with static routes, and firewall redirects but had no luck.  

 

 

How can i exclude a single ip from the ipsec phase2 entry?  Am I going to have 
to break my phase 2 entry into multiple entries so that I can skip over this 
one ip, or is there a better way?

 

 

 

 

 

 

Thanks,

Dan

 

 

Van: [email protected] [mailto:[email protected]] 
Namens D C
Verzonden: donderdag 29 augustus 2013 14:56
Aan: [email protected]
Onderwerp: [pfSense] Remove a single ip from ipsec

 

Create a Block rule on IPSEC above the allow rule

 

Cheers,

Jochem

_______________________________________________
List mailing list
[email protected]
http://lists.pfsense.org/mailman/listinfo/list

Reply via email to