|
Posted by free on December 16, 2004, 1:01 pm
If you were Registered and logged in, you could reply and use other advanced thread options
Hi,
I want to provide Internet access to my VPN users without using split
tunnel. I know that it is not possible to route traffic by the same
interface as the packets come in. So I set up a default route to an another
interface. But...in that case, during ISAKMP negociation, packets are routed
to this default route and VPN client are unable to get answer. How can I set
up in Pix rules that IPSEC packets should be routed to the VPN interface.
I hope the schema below will help to understand my poor english :
Internet ------- Linux router ----- Pix Firewall ----- Internal LAN
|
|
|
Internet (VPN client access)
Thank you in advance for your advices or recommandations.
| 
XML site map