Hello Daniel, Hello Jessie Thanks indeed for the help! Daniel: Yes, I'm using IKEv1.
I already set rightsubnet to 0.0.0.0/0 as the example at http://www.strongswan.org/uml/testresults43/ikev1/passthrough/ , but still connecting to internet through from the remote site, not through the VPN... Do I need to change postrounting (masquerade) options ?? Thanks (once again) 2009/9/30 Daniel Mentz <danielml+mailinglists.strongs...@sent.com<danielml%2bmailinglists.strongs...@sent.com> > > Tica wrote: > >> Now I need to route all internet traffic through the VPN... the remote >> office can only access internet through the main office structure. >> > > Yes. strongSwan provides this functionality. Are you using IKEv1 or IKEv2? > > Here's an example for IKEv1 you can take advantage of > > http://www.strongswan.org/uml/testresults43/ikev1/passthrough/ > > The key is to set > > rightsubnet=0.0.0.0/0 > > and to set up a pass through connection so that local traffic is not being > processed by IPsec. > > -Daniel > > -- Tica ;-) _______________________________________________ Users mailing list Users@lists.strongswan.org https://lists.strongswan.org/mailman/listinfo/users