OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Re: IPSec tunnel problem

From: Alexey Vatchenko (avbsdua.org)
Date: Thu Feb 28 2008 - 00:48:31 CST


Jeff Quast wrote:
> you need to declare a bypass flow on the side of the network where the router, presumably on 192.168.0.0/24 requires communication to the local network segment also on 192.168.0.0/24. It is probobly trying to send this across the tunneled wire, which won't reach its destination.
> Create a bypass for flows from 192.168 to 192.168, like so:
>
> flow esp from 192.168.0.0/24 to 192.168.0.0/24 type bypass

That's it! Thanks.

--
Alexey Vatchenko
http://www.bsdua.org