Jump to content

This is the support site for Andrews & Arnold Ltd, a UK Internet provider. Information on these pages is generally for our customers but may be useful to others, enjoy!

FireBrick Road Warrior FireBrick Config: Difference between revisions

FireBrick Road Warrior FireBrick Config (view source)

Revision as of 20:28, 17 February 2016

32 bytes removed ,  17 February 2016
m
→‎A note on IP Allocations
'''Separate pool:'''
Choose an IP range not used anywhere else in your FB config
(and to avoid confusion choose something non-routable eg from 10...)
Set the NAT flag on the ipsec roaming pool definition.
 
In this scenario all traffic arriving at the FB from the remote
device will be NATed (with FB source address) before being routed
onwards. This provides what most people would expect - remote
device has a non-routable NATed address. Sessions originating
on the device can talk to anywhere the FB can - but other
devices cannot initiate sessions to the remote device.
 
'''IPs from the existing LAN'''
AA-Andrew
autoreview, Bureaucrats, editor, Interface administrators, reviewer, Administrators
12,467

edits

Retrieved from "http://support.aa.net.uk/Special:MobileDiff/10786"