Hi All,

I have Libreswan/Xl2tpd IPSec/L2TP VPN running on the firewall appliance.
As such I have the zones/interfaces/tunnel (see below) and standard rules
associated with the VPN.

A user in the admx zone has acquired a hardware stack that requires
IPSEC/L2tp connection to connect to it.  It has its own VPN/router.

Can I define a second passthrough IPSEC tunnel to the user hardware and not
affect my existing VPN on the Shorewall appliance?

Thanks,

~Chop



Shorewall version: 4.5.16.1

interfaces
------------
net     eth0
dhcp,tcpflags,nosmurfs,routefilter,sourceroute=0,blacklist
loc     eth1            tcpflags,nosmurfs,routefilter
l2tp    ppp+
cpp     eth2            tcpflags,nosmurfs
dc1     eth3            tcpflags,nosmurfs
admx   eth4            tcpflags,nosmurfs
ovpn    tun+

zones
-------------
fw      firewall
net     ipv4
vpn     ipsec
l2tp    ipv4
loc     ipv4
cpp     ipv4
dc1     ipv4
admx    ipv4
ovpn    ipv4

tunnel
------------
ipsec         net         0.0.0.0/0           vpn
openvpnserver:tcp:443   net     0.0.0.0/0
------------------------------------------------------------------------------
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to