Home / server / Questions / 557361
In Process
Sirber
Asked: 2013-11-26 12:34:31 +0800 CST

Routing between many systems, no first hop

  • 772

I have a main router (10.20.0.1 (lan), 10.20.201.1 (vpn server)) connected to 5 other GW via VPN. Every gateway can ping every other one, and the PC behind them. One of my router, 10.20.6.1 (lan), 10.20.201.5 (vpn), has access to another network (10.10.10.x) and I want to give all my network access to it.

On the main router I added a route:

10.10.0.0 netmask 255.255.0.0 gw 10.20.201.5

when I run a traceroute, I don't even have a first hop. If I remove the route, the first hop is internet (which is the default). I can ping 10.20.201.5 and everything behind it. On the remote router, I don't see any icmp packet from 10.20.0.1 while pinging a host on the 10.10.x.x network. THe remote router can ping the 10.10.x.x network and access it whitout issues.

route

1 Answers

  1. Focusing on just the main router and the remote 10.10.x.x:

    You'll need (assuming straight VPN tunnels between the routers and not a managed network in the middle):

    • route on main router to 10.10.0.0 (possibly like you did)
    • possible tunnel rule on the main router to tunnel the traffic (not sure how your VPN is setup, route based, policy based, etc.) destined from 10.20.0.0 network to 10.10.0.0 network.
    • return route on the 10.10.0.0 network. That network needs to know where your 10.20.0.1 network is and how to get there. So it will need routes and possibly rules/policies to send traffic from 10.10.0.0 through the router on 10.20.6.1 across the VPN tunnel that goes back to your main router.

    You would need to have at least some understanding though of your routers and VPN tunnels and how they are configured and what commands to run to accomplish the above.

    There may even be things beyond what I've mentioned. without knowing your network and the configs involved, it is a difficult thing to answer outright.

    • 2