Hi Folks, greetings!


We have the following situation:

LAN A 192.168.13.0/24
Gateway LAN A Interfaces:
Internal: 192.168.13.20
External: 192.168.7.21

LAN B 192.168.56.0/24
Gateway LAN B Interfaces:
Internal: 192.168.56.101
External: 192.168.7.18

Behind LAN B, there's also LAN C (10.20.30.0/24 - internal gateway is 10.20.30.2) and we do need to have LAN A connecting to LAN C

On LAN A gateway I have created the following interfaces:

ifcfg-LANAB
DSTNET=192.168.56.0/24
DSTGW=192.168.56.101
SRCNET=192.168.13.0/24
SRCGW=192.168.13.20
DST=192.168.7.18
TYPE=IPSEC
ONBOOT=yes
IKE_METHOD=PSK
IKE_PSK=JustAKey

ifcfg-LANAC
DSTNET=10.20.30.0/24
DSTGW=10.20.30.2
SRCNET=192.168.13.0/24
SRCGW=192.168.13.20
DST=192.168.7.18
TYPE=IPSEC
ONBOOT=yes
IKE_METHOD=PSK
IKE_PSK=JustAKey

On LAN B gateway the interfaces:

ifcfg-LANBA
DSTNET=192.168.13.0/24
DSTGW=192.168.13.20
SRCNET=192.168.56.0/24
SRCGW=192.168.56.101
DST=192.168.7.21
TYPE=IPSEC
ONBOOT=yes
IKE_METHOD=PSK
IKE_PSK=JustAKey

ifcfg-LANCA
DSTNET=192.168.13.0/24
DSTGW=192.168.13.20
SRCNET=10.20.30.0/24
SRCGW=10.20.30.2
DST=192.168.7.21
TYPE=IPSEC
ONBOOT=yes
IKE_METHOD=PSK
IKE_PSK=JustAKey

Versions:
Kernel 2.6.18
ipsec-tools 0.6.5
openssl 0.9.8e


Is that correct? Do I need to edit the setkey.conf with the rules for the tunnel?


Thanks in advance.

Regards,

AL