Netgate SG-1000 microFirewall

Author Topic: IPSec LAN-to-LAN Source IP  (Read 126 times)

0 Members and 1 Guest are viewing this topic.

Offline mitra7

  • Newbie
  • *
  • Posts: 13
  • Karma: +0/-0
    • View Profile
IPSec LAN-to-LAN Source IP
« on: January 18, 2018, 03:42:49 pm »
# Interfaces
WAN - XX
LAN - 192.168.1.51/24
LAN 1 - 192.168.65.0/24
LAN 2 - 10.50.53.254/24

# IPSec Phase 2
Local Network: 10.50.53.254/24
Remote Network: 192.168.190.113/32

Hello,

I have an IPSec connection established, however if I try to ping or do curl from the terminal I cannot, only by specifying the IP Address.

I have to do:
curl --interface 10.50.53.254 http://192.168.190.113

If I do without specifying the source address the traffic isn't routed through the IPSec interface (enc0).

Some help is highly appreciated.

Offline mitra7

  • Newbie
  • *
  • Posts: 13
  • Karma: +0/-0
    • View Profile
Re: IPSec LAN-to-LAN Source IP
« Reply #1 on: January 19, 2018, 08:16:42 am »
I managed to solve my problem by removing the routes that were added:
route del 192.168.190.113
route del 192.168.190.116

Then I did:
route add 192.168.190.113/32 -iface vtnet3
route add 192.168.190.116/32 -iface vtnet3

Is there any way I can do this through the webpanel?