LinuxQuestions.org
Download your favorite Linux distribution at LQ ISO.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Networking
User Name
Password
Linux - Networking This forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game.

Notices


Reply
  Search this Thread
Old 06-04-2010, 12:30 PM   #1
ed182
LQ Newbie
 
Registered: Oct 2009
Posts: 5

Rep: Reputation: 0
Unhappy Firewall Rules to add VPN Network into my LAN Network


Dear Friends of Linux Questions

I greet you at the same time ask me to help with a problem I have and I could not solve. Within the requirements I have is to connect a network that is connected by VPN to my LAN.
The detail is I could have connection to the network by adding a network card (eth3) on the firewall and connect to the VPN router (DLINK) cable network, but I can not reach the other estin that are in the VPN.

My network works in this network range: 192.168.0.0/16
Which network to connect 10.30.0.0/24

Currently, we have three branches interconectads:

ZONE 1: 10.30.1.0 (RESPONDE PACKAGES) LOCATION: DATACENTER CONNECTION: CABLE NETWORK WITHOUT PROBLEMS
ZONE 2: 10.30.2.0 (NO ANSWER)
ZONE 3: 10.30.3.0 (NO ANSWER)
ZONE 4: 10.30.4.0 (NO ANSWER)

CURRENT RULES TO CONNECT FIREWALL: 10.30.1.0/24
My home network works in this network range: 192.168.0.0/16
Which network to connect 10.30.0.0/24

ROUTE
-----------------
[root@fw ~]# route -n
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
190.81.174.48 0.0.0.0 255.255.255.240 U 0 0 0 eth0
10.30.1.0 0.0.0.0 255.255.255.0 U 0 0 0 eth3
10.0.0.0 0.0.0.0 255.255.255.0 U 0 0 0 eth2
192.168.0.0 0.0.0.0 255.255.0.0 U 0 0 0 eth1
0.0.0.0 190.81.174.49 0.0.0.0 UG 0 0 0 eth0

FIREWALL SCRIPT THAT WORKS WELL

iptables -A INPUT -s 192.168.0.0/16 -i eth3 -j ACCEPT
iptables -A FORWARD -s 192.168.0.0/16 -d 10.30.1.0/24 -j ACCEPT
iptables -t nat -A POSTROUTING -s 192.168.0.0/16 -d 10.30.1.0/24 -o eth3 -j MASQUERADE


Distribution: CentOS 5.2

It should be noted if I add a station within the network: 10.30.1.X/24 has no problems connecting with the other destinations.
Physically this router is inside my 10.30.1.X DATA CENTER another wan.

Please help me and that I should add, I'll be very grateful and happy to answer any questions.
 
Old 06-04-2010, 03:17 PM   #2
ed182
LQ Newbie
 
Registered: Oct 2009
Posts: 5

Original Poster
Rep: Reputation: 0
ok. now my post is in network. please any tip or trick.
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
[SOLVED] Creating simultaneous network connections to a VPN and local area network. Reactor89 Linux - Networking 2 06-03-2010 12:52 AM
VPN, Firewall, Ip Routing, Performance Network, Administrator Syetm l_leonard Linux - Server 1 08-22-2008 09:29 AM
vpn/lan network set up nanjil SUSE / openSUSE 2 03-22-2007 05:37 AM
How to access VPN + LAN in iptables Firewall pradeepjagtap Linux - Security 4 10-24-2006 12:08 AM
MDK Multi-network-firewall - where are the network logs stored? Avatar Mandriva 5 02-11-2004 08:44 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Networking

All times are GMT -5. The time now is 03:34 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration