[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

RE: Ayuda openvpn (ya me funciona).



A proposito, alguien sabe como se hace para que el servidor VPN asigne una
determinada IP de la LAN remota que se desea acceder via OpenVPN y que ademas
se le asigne el gateway de la LAN remota. Resulta que necesito que el road
warrior asuma una determinada IP de la LAN, la cual pertenecera a una VLAN de
la red remota, la cual ademas, es parte de una red mayor

Saludos, gracias y feliz navidad a to2,








Quoting Sergio Villalba <svillalba@cherrytel.com>:

Hola...

ya me funciona.

he realizado lo siguiente:

he modificado las reglas de IPTABLES con esto:
# Generated by iptables-save v1.2.11 on Wed Dec 21 12:19:44 2005
*nat
:PREROUTING ACCEPT [276:22129]
:POSTROUTING ACCEPT [2036:128795]
:OUTPUT ACCEPT [2036:128795]
-A POSTROUTING -s 10.9.233.0/255.255.255.0 -o eth1 -j SNAT --to-source
10.9.234.111
COMMIT
# Completed on Wed Dec 21 12:19:44 2005
# Generated by iptables-save v1.2.11 on Wed Dec 21 12:19:44 2005
*mangle
:PREROUTING ACCEPT [319:26622]
:INPUT ACCEPT [21966:3909125]
:FORWARD ACCEPT [786:152569]
:OUTPUT ACCEPT [23110:6011806]
:POSTROUTING ACCEPT [23896:6164375]
-A PREROUTING -m state --state RELATED,ESTABLISHED -j ACCEPT
COMMIT
# Completed on Wed Dec 21 12:19:44 2005
# Generated by iptables-save v1.2.11 on Wed Dec 21 12:19:44 2005
*filter
:INPUT ACCEPT [21966:3909125]
:FORWARD ACCEPT [786:152569]
:OUTPUT ACCEPT [23110:6011806]
COMMIT
# Completed on Wed Dec 21 12:19:44 2005

Y luego en el cliente windows:
route 10.9.234.0 255.255.255.0

Mi unica duda es si esta es la forma correcto :)

PD: esto lo podria realizar con shorewall??

un saludo.
S.V.





--
To UNSUBSCRIBE, email to debian-user-spanish-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org





Reply to: