Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 09 Mar 2006 10:44:14 -0300
From:      Tiago Cruz <tiagocruz@b4br.net>
To:        "freebsd-net@FreeBSD.org" <freebsd-net@FreeBSD.org>
Subject:   Re: Network client is the same from server (solution)
Message-ID:  <1141911854.11450.28.camel@localhost.localdomain>
In-Reply-To: <1141657294.25455.38.camel@localhost.localdomain>
References:  <1138387362.4742.9.camel@localhost.localdomain> <43DA6C6A.7050701@elischer.org> <1138390041.4742.19.camel@localhost.localdomain> <43DA8E70.2070804@elischer.org> <1138621574.18130.26.camel@localhost.localdomain> <43DE6030.4090702@elischer.org> <20060131123042.GA74812@uk.tiscali.com> <1138713557.25466.4.camel@localhost.localdomain> <43DFCBBC.7000206@elischer.org> <20060201134633.GB78696@uk.tiscali.com> <1141657294.25455.38.camel@localhost.localdomain>

next in thread | previous in thread | raw e-mail | index | archive | help
Some months after, I'm here back to say the solution:

I did this in my default gateway master (192.168.0.0/22) with CARP
(firewall fail over):

Firewall Rules:
==============
vpn2 = "tun0"
...
set loginterface $vpn2
...
binat on $vpn2 from 192.168.0.0/22 to any -> 192.168.8.0/22
...
pass in  on $vpn from any to any keep state
pass out on $vpn from any to any keep state

Client: Windows XP (192.168.0.0/24) with OpenVPN (10.5.0.0/24):

SO, the client need to ping the host 192.168.8.32 to get reply from
192.168.0.8.

Is working now :-)

Logs:
54. 224700 rule 26/0(match): pass in on tun0: 10.5.0.6 > 192.168.0.32:
ICMP echo request, id 1024, seq 13568, length 40

Thank you,
Hope that help somebody.

-- 
Tiago Cruz
http://linuxrapido.org





Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?1141911854.11450.28.camel>