Tag Info

Hot answers tagged

2

If the VLANs are trunked to the other closets, you only need ip routing on the core switch.


1

but doing a traceroute from the pfsense machine to an ip in the encryption domain range sends the traffic out over the internet This is a clear indication that you do not have your IPsec Phase 2 entries configured correctly. IPsec matches traffic purely on source/dest IP subnet, and if it's not sending your desired traffic down the tunnel, you have a ...


1

Maybe I'm missing something from your setup but here's what I think is the issue. If the Modem is connected to one of the switch as pictured in your design via an access port, then that modem needs to have routes for all of your VLAN pointing back to your OpenBSD firewall. That would explain why the Modem seems to only "see" the Firewall since it's layer 2 ...


1

I don't know the details of the network configuration files of recent Debian releases, but you should achevie what you want following these steps: remove base interface (bond0) IP using the command "ip addr flush dev bond0" or "ifconfig bond0 ip 0.0.0.0" insert an iptables rules that drop any traffic coming from the untagged interface (bond0) using the ...


1

First let me start out by adding just a bit of info. It looks like you intend all IPs to be private network addresses. The IPs that start with 172 must belong to 172.16.x.x - 172.31.x.x for them to be considered private. Since this is just a packet tracer lab, this doesn't really matter. Some of the commands I am entering might be unnecessary if you don't ...



Only top voted, non community-wiki answers of a minimum length are eligible