routing specific packets through IPSEC gre tunnel
-
Hi, I hope this is in the right section. we are in need of using a web service for one of our servers that just connects through GRE ipsec tunnel.
I have a DMZ net with 192.168.10.0/24 address.
i have a gre ipsec tunnel with 192.168.251.192/30 (basically: x.x.x.194 on our side and x.x.x.193 on their side.
the web service address is : 10.1.1.20
i've added a static route in : system=>routing=>static route. telling that for destination 10.1.1.0/24 network to use GRE gateway.
i have a outbound NAT saying for 192.168.10.4 with destination of 10.1.1.20 to use GRE-interface address.
when i try to ping 10.1.1.20 from my 192.168.10.4 host, it does not go through. i've captured icmp packets with 10.1.1.20 destination of GRE interface. surprisingly it shows that 10.1.1.20 reply to my x.x.x.194 side of the tunnel, but i get nothing on the host.
any help would be appreciated. -
@vistatech said in routing specific packets through IPSEC gre tunnel:
10.1.1.20
Hey
And why is outgoing NAT used ?
Try disabling it . I have a similar scheme and everything works fine without NAT.
The question such, Pfsense can ping a host 10.1.1.20 ?