Hi Tom, Yes, they would. The standard FreeSWAN-based IP service on Linux.
Cheers Jason. -----Original Message----- From: Tom Eastep [mailto:teas...@shorewall.net] Sent: 29 September 2017 17:16 To: shorewall-users@lists.sourceforge.net Subject: Re: [Shorewall-users] IPsec Tunnel as Default Gateway for Branch Offices On 09/28/2017 12:29 PM, Jason Timmins wrote: > Hi There, > > > > We've got a few branch offices and we'd like for all their Internet > traffic to pass through a Shorewall-based firewall in our data centre. > Their routers support the creation of IPsec tunnels that can be used > as the site's default gateway. How do we configure the central > Shorewall server to support that topology? The sites have unique IP > subnets and it'd be nice if they could router to each other too. NAT > for the entire WAN would, I suppose, happen from the Shorewall server in the > DC. > > It looks like it might be possible but I'm struggling with the detail. > We've used Shorewall quite a bit in the past but this is a much more > complicated config. > Would the IPSEC tunnels terminate on the Shorewall system? -Tom -- Tom Eastep \ Q: What do you get when you cross a mobster with Shoreline, \ an international standard? Washington, USA \ A: Someone who makes you an offer you can't http://shorewall.org \ understand \_______________________________________________ ------------------------------------------------------------------------------ Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! http://sdm.link/slashdot _______________________________________________ Shorewall-users mailing list Shorewall-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/shorewall-users
