Smoothwall IPSEC Setup

[Joko]

Hi there,

 

Does anyone use their Smoothwall boxes to connect between schools via IPSEC?

 

We have a tunnel set up and for the life of me cannot figure out how to test/throw traffic down there.

 

I would like a few users to be able to remote onto RDP servers between the school.

 

Thanks.

 

Joe.

[tdk1069]

We did similar recently to enable admin staff to access Sims/FMS on other the other sides. We had to put rules in to allow traffic in/out via the IPSec Interface before we could actually ping anything on the other network, we had different subnets to contend with mind, and this was between two Smoothwall's

[Joko]

Yeah, looks at it, i would have to resubnet the schools since they're using the same subnets!

 

I may use this just for maintenance instead. Thanks for the reply!

[ibpalle]

If they are using same subnets, routing will be an issue - you could apply NAT but in the long run, re addressing one subnet would be better. Less confusing. Once the tunnel is setup, just remember to add an access rule as tdk1069 mentioned. Just allow the IPSEC interface access to the LAN. If you want to be able to access the Smoothwall admin GUI over the tunnel, then also add the IPSEC interface in the Smoothwall access rules.

 

Finally, when setting up the tunnel, remember to expand the advanced section and add the Smoothwall LAN IP in the local IP address field. This allows the Smoothwall itself to use the tunnel for the remote subnet.