topic Re: VPN routing problem in Network Security

VPN routing problem

FONKOU FOSSO — Fri, 21 Feb 2020 09:54:56 GMT

Hello everybody,

I have a vpn network with 4 sites, 4 cisco routers and i used Ipsec with preshare keys. I would like to redirect all Internet traffic of sites to a central site that will route it to an ISA server that will check the traffic. the vpn is already setup but i don't know how to redirectt ip packets on an interface by identifing the source address IP of the packet?

Re: VPN routing problem

tomek0001 — Tue, 26 Feb 2008 21:40:00 GMT

Can you be more specific, do you mean that you have 4 offices that interconnect to each other using IPSEC and you want to forward only the internet traffic to one site where ISA server resides?

Do you have direct access using split tunneling currently at the 4 offices?

Re: VPN routing problem

FONKOU FOSSO — Fri, 29 Feb 2008 18:28:29 GMT

that is the graph of the network i would like to get.

Re: VPN routing problem

tomek0001 — Wed, 05 Mar 2008 03:01:13 GMT

if you are only concerned about clients using vpn traffic, what you could do is set all IE or firefox browsers (this can be automated) to use a proxy for internet access. The routers would only allow the ipsec traffic and not clients directly going over the internet.

Each client would send their web requests to the proxy (proxy should have a private ip address) and as long as you have the internal routing between offices working correctly they will route to the proxy server ISA.

hope this helps,

(please rate this post if you found it useful)