Static routing problem

[Dan Williams]

We have three sites all setup with a static IP address and want to be
able to connect to each (represented by AAA.AAA.AAA.AAA, etc. in my
diagram)

I have posted a diagram of what we have setup, available at
http://home.btconnect.com/dtwilliams/network.htm

Site A can ping both Site B and C as we have VPN tunnels setup to
each. However, Site B can't currently contact Site C.

Can anyone let us know if it's possible for Site B to route to Site C
via Site A using the VPN tunnels, or do we need to setup a VPN tunnel
from Site B to C?

We have tried setting up a static route on site B, using the command

route add 192.168.14.0 mask 255.255.255.0 192.168.0.100

but this complains about the gateway not lying on the same network as
the interface.

Anybody got any bright ideas?

Thanks in advance for any suggestions.

Dan Williams.

 

[Jeroen van Bemmel]

Perhaps 'route add 192.168.14.0 mask 255.255.0.0 192.168.0.100' ?

Those 'AAA,BBB', etc addresses, are they different from the 192.168.x.x
ones?

 

[Dan Williams]

That's correct. They're all assigned to us by our ISP so we're unable
to change them to be on the same subnet.

Dan

 

[Jeroen van Bemmel]

Try 'route add 192.168.14.0 mask 255.255.255.0 192.168.14.100' (so different
gateway)
The suggestion I gave before probably won't work, but - provided the
192.168.0.100 is the default gateway - the above perhaps will. If not, you
would also need to add a static route to the 192.168.14.100 gateway:
route add 192.168.14.100 192.168.0.100

 

[Phillip Windell]

The Linksys VPN router is probably blocking the Ping. The Linksys people
would be the best to troubleshoot this,...they are the one who know best how
their device works.

There is no point in static routes. All three networks are "directly
connected" so the "router" will already know where they all are. Static
routes are only for systems with two or more routers and are used when a
destination is more than one "hop" away.

 

[dan_williams]

Having sent an email directly to Linksys, i got the following reply:-

Dear Valued Linksys Customer,

Thank you for contacting Linksys Customer Support.

It is not possible to route through a VPN tunnel.
It is higly recommended that you create a seperate tunnel for
conenction B and C.

I'll be glad if this helps. Thank you.

If you have any question visit our knowledge base at
linksys.custhelp.com

I also asked them the following:-

Can you let us know if you do an ADSL VPN Router that supports the UK
RFC 2364 PPPoA encapsulation and allows us to have more than 5 VPN
connections? It also has to be a wireless access point too.

The WAG54G allows only 5 VPN tunnels, where as the BEFVP41 allows upto
70, but it doesn't support PPPoA connections.

Of which i got the following response:-

I regret to tell you, but as of right now we don't. Future firmware
revision may increase the number of VPN tunnel for ADSL router/modem.


DOH! Looks like we'd have to get an additional static IP address at
Site B in order to create direct VPN tunnels to site C.

Cheers anyway

Dan Williams