Hi

I have problem:


VPN connection
---------------------
eee.fff.ggg.hhh
|
| leased line
|
aaa.bbb.ccc.ddd (public address)
----------------------
Debian server
----------------------
192.168.0.100
|
|intranet
|
192.168.0.1
----------------------
gateway connected to internet
----------------------
| |
| |
internet intranet (192.168.0.0)



problem is that both connections are to the internet and I want to use that trough intranet gateway. But if I declare intranet gateway to be default route then aaa.bbb.ccc.ddd is not visible from outside server (ping) . If I declare aaa.bbb.ccc.ddd as default everything is O.K. telnet and ping work. What I want is to make VPN connection like it is stated but keep gateway as default route to internet. All this is because the cost. One connection is charged more than another.

Thanks in advance
Pero

p.s. sorry for bothering

Have a read of the Advanced Routing HOWTO, Chapters 3 & 4..

I tried. Still not working. Not to think that I didn't try before posting to this forum it all started week ago. I will try to explain what I did until now and what do I mean where is the problem. If route is declared as default it receives all packets from no mather which net and subnet (off course if it is visible directly or routed trough switcher). Problem is that I want to leave default route as is and make another address on same machine, other nic, visible (receiving packets) regardles of senders IP. I tried everithing I found in diferent HOWTOs including NAT routing to lo and so on. I tried as you sugested with reading advanced routing howto and IP command reference but it all finished killing both connections (now I must drive to work to enable internet connection).

Thanks in advance
Pero

You can't have two nics in the same Linux System in the same subnet. Linux will only use one interface to respond to all traffic reguardless of which interface the packets were recieved on, causing odvious problems. You need to set up NAT/Routing with a VPN tunnel. I would try to redesign your topology. Here is a good FW/Router design how-to

http://eressea.pikus.net/~pikus/plug...all/page0.html

Thanks to everyone solution was found on the place peter suggested (I didn't followed the link but read older doc sorry).

Pero