On 09/28/2017 12:29 PM, Jason Timmins wrote:
> Hi There,
> 
>  
> 
> We’ve got a few branch offices and we’d like for all their Internet
> traffic to pass through a Shorewall-based firewall in our data centre.
> Their routers support the creation of IPsec tunnels that can be used as
> the site’s default gateway. How do we configure the central Shorewall
> server to support that topology? The sites have unique IP subnets and
> it’d be nice if they could router to each other too. NAT for the entire
> WAN would, I suppose, happen from the Shorewall server in the DC.
> 
> It looks like it might be possible but I’m struggling with the detail.
> We’ve used Shorewall quite a bit in the past but this is a much more
> complicated config.
> 

Would the IPSEC tunnels terminate on the Shorewall system?

-Tom
-- 
Tom Eastep        \   Q: What do you get when you cross a mobster with
Shoreline,         \     an international standard?
Washington, USA     \ A: Someone who makes you an offer you can't
http://shorewall.org \   understand
                      \_______________________________________________

Attachment: signature.asc
Description: OpenPGP digital signature

------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Shorewall-users mailing list
Shorewall-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to