<![CDATA[Phase2 entry with public remote subnet]]>Hi,

I'm facing a complicated problem. Already tried playing with routings and so, but without luck.

One of my IPsec tunnels ph2 entries, is defined to have, as remote subnet, a public /16 network. The tunnel has other ph2 entries with private remote subnets working properly. I suspect that somehow, as the remote subnet is public, it's not being caught by racoon.. but I've found no reference at all for this particular setup. Maybe it just can't be done, I don't know..

Any ideas?

Thanks,

Rubén.

]]>https://forum.netgate.com/topic/54608/phase2-entry-with-public-remote-subnetRSS for NodeWed, 12 Aug 2026 00:20:41 GMTTue, 26 Mar 2013 17:04:31 GMT60<![CDATA[Reply to Phase2 entry with public remote subnet on Thu, 28 Mar 2013 07:41:24 GMT]]>Have a chek at the IPSec logs on each end and I'm sure you'll find the answer :)

]]>https://forum.netgate.com/post/386971https://forum.netgate.com/post/386971Thu, 28 Mar 2013 07:41:24 GMT<![CDATA[Reply to Phase2 entry with public remote subnet on Wed, 27 Mar 2013 08:30:03 GMT]]>That's what I thought… a network is a network. Ok, we'll continue debugging, thanks :)

]]>https://forum.netgate.com/post/386739https://forum.netgate.com/post/386739Wed, 27 Mar 2013 08:30:03 GMT<![CDATA[Reply to Phase2 entry with public remote subnet on Wed, 27 Mar 2013 00:34:21 GMT]]>Doesn't matter whether it's public or private, there is no concept of public or private IPs within IPsec, they're just IPs or networks that are all treated equally. Lot of VPNs use public IPs. As long as the traffic you want to go across matches the P2 local and remote networks, it'll work.

]]>https://forum.netgate.com/post/386714https://forum.netgate.com/post/386714Wed, 27 Mar 2013 00:34:21 GMT