Home page logo

basics logo Security Basics mailing list archives

iptables - vpn - bridge mode - complex
From: karillion () gmail com
Date: 7 Mar 2007 04:44:20 -0000

Hi All,

You will have to forgive my complete noobishness on this but here it is.

I am responsible for setting up a vpn to connect our Sydney office to our NZ office, we have just purchased 2 new 
linksys routers both RV082's.

the current topology consists of a cisco 2514 at the sydney office and a linux firewall at the NZ end running iptables 
on debian.

The plan is to place one of the linksys routers at either end behind each router respectively. so it would go 

we are getting connectivity either way fine, i can ping from the Sydney_RV082 to the NZ_RV082 find both ways, but upon 
attempting to connect the VPN, it just wont establish a connection.

i have come to supect that the cause of this is that the iptables firewall is port forwarding the ip from the NZ 
linksys router.

my proposed solution is that we activate a bridging mode on the iptables firewall so that it just passes through the 
connection from the outside to the linksys.

heres where things get interesting.

the iptables firewall is shared AND is not managed by me.

so im confident in getting the iptables firewall to use bridge mode but the thing is i need it to bridge ONLY traffic 
headed for a specific ip address (the rv082)

now if i can get it to do this i THINK this will solve my problem and get the vpn to connect so here is my full 

1. Can i do this with iptables?
2. If i can, will this solve my problem?
3. What do i set the default gateway to on the NZ RV082... whereas it is currently set to the ip bound to internal side 
of the iptables firewall
4. Is there a better way to go about this?

Thanks for any help on this, i need this solved in the next couple of days so ANY helpful feedback would be really 



  By Date           By Thread  

Current thread:
  • iptables - vpn - bridge mode - complex karillion (Mar 07)
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]