Linksys VPN Routing - yet again! 1

[rpaverd]

Configuration is:
Subnet A 10.22.171.0
Subnet B 10.40.232.0

Connected by Linksys VPN. Subnet A uses Linksys router for internet access as well as VPN (primary gateway. Subnet B is connected to Internet and corporate intranet by T1 router at 10.40.232.254. Linksys VPN router on subnet B is 10.40.232.201.

Route has been added to T1 router to recognize VPN gateway. All devices can ping all other devices on both networks.

HOWEVER, the primary requirement for this VPN link is to access a secure website at 136.9.249.155 from subnet A. All devices at subnet B can access this website, but those at Subnet A cannot (obviously, as their primary gateway is 10.40.171.45 - to the internet).

To resolve this, on the subnet A router, I have added the route:
136.9.249.155 255.255.252.0 LAN 10.40.232.254 Metric 3
In theory this should the route all traffic for the 136.9.248 and 249 subnets through the subnet B gateway.

However this is not working.

Any suggestions?

Richard

 

[markku]

Hi,

Your third thread on the same subject.

Assuming 136.9.249.155 is accessible from the LAN B ( thru T1 ) you could establish a parallel VPN tunnel from A to B for network 136.9.249.155 255.255.252.0 with individual PSKs.

The tunnels are independent animals and applied in the order they are numbered.

 

[rpaverd]

Sorry about the multiple threads - but the second one doesn't count (I hope) as I cancelled it...!

You have lost me with your suggestion, however. 136.9.249.155 is accessible from LAN B, but I do not know how I should implement the parallel tunnel from A to B for the 136.9.249.155 255.255.252.0 network? And what are individual PSKs?

I really appreciate the feedback and suggestions

Richard

 

[markku]

You have now one tunnel from A to B:

Local 10.40.232.0/255.255.255.0 remote 10.40.232.0/255.255.255.0

Add another one from A to B:

Local 10.40.232.0/255.255.255.0 remote 136.9.249.xxx/255.255.252.0

Both with individual Pre-Shared Key

Thus your packets from A for 136.9.249.xxx-network will be routed to B main gateway instead of the net. Thru just established VPN tunnel

 

[rpaverd]

Markku, you are a genius!