Toni Mueller wrote:
Hi,
I tend to a network that "locally" looks like this:
East = 1.2.0.0/15 (central site)
West = 1.5.0.0/16 (satellite site)
"West" has a default route across the VPN to "East".
All gateways are running OpenBSD 4.5-stable.
Connectivity between East and West is no problem. The problem is that
there is no connectivity between the gateway at West and other hosts at
West. After some debugging, I found out that the gateway at "West"
sends packets destined for hosts in the "West" network to "East"
instead, eventually getting a TTL exceeded from the gateway at "East".
I'd like the more specific route, ie, the one out the LAN interface
which is directly attached to all of "West", to prevail over the
default route, but it observably doesn't.
Any enlightenment on this issue is most welcome, despite my having
found a workaround!
Kind regards,
--Toni++
Could you send us some actual details? Interface configs, ipsec.conf,
pf.conf, output of route show, maybe a little network diagram? anything
so that we actually know what is doing on?