Timothy J. Massey wrote:
Hello!
I have created a certificate-based tunnel between a Leaf firewall and a
Windows client using either the Windows 2000 VPN tool
(http://vpn.ebootis.de/) or SSH Sentinel. In both cases, the client
software establishes the connection, and according to Leaf's
left=68.208.33.25
leftsubnet=10.154.16.0/22
rightsubnet=10.154.16.0/255.255.252.0
(If I'm reading this correctly..)
In left's view, 10.154.16.0/.252 is owned by left. Ipsec routes get a lower
route priority than local interface routes. Therefore, traffic won't bother
to traverse
