Destination Networks

[davidvr]

Love the new feature, but how do I put in multiple destination networks for a tunnel?

[sky-knight]

Multiple?

You have a multisegment network at one site and you're trying to site-to-site from another site to this network?

I think all you need to do in that case is a static route to the router on the far side of the tunnel.

[davidvr]

Where would I add that? Also I'm noticing the firewall does not seem to apply to IPSEC tunnels?

[sky-knight]

I haven't tested that functionality personally beyond just connectivity tests. The lack of firewall module support would be bad since this feature is supposed to be fully subject to rack filtration. As for the static route, that's in config -> networking -> advanced -> routes.

[davidvr]

Yes it is bad, as I was using the firewall to allow us access to client networks but block their access to ours.

[davidvr]

By the way, Adding a static route did not work

[jhirth]

Where would I add that? Also I'm noticing the firewall does not seem to apply to IPSEC tunnels?

I'm wondering if you ever got the ipsec tunnel to filter through the rack firewall?

Thanks
JYH