Hot answers tagged


This seems to confirm that there is actually no forward policy needed on site A's router to forward to over the IPsec tunnel, but I do not understand why. That is because A wants to receive from B only IPsec traffic. IPsec traffic from A to B has A's IP address as a destination IP address - so it is handled by dir in policy on A. ...

Only top voted, non community-wiki answers of a minimum length are eligible