Re: isakmpd and dynamic flows

[Peter Galbavy <peter_(_dot_)_galbavy_(_at_)_knowledge_(_dot_)_com>]

Another question on using IPSec.

What I am doing is tunnelling a /26 out of my network to a remote
subnet (home). This is working fine, in fact I am typing this through
an ssh session on it.

My current problem is that I have configured the "core" network as 0/0
and the remote 213.170.3.0/26 - i.e. all traffic coming or going to
213.170.3.1 (for example) goies via the tunnel. Only problem now is
that I cannot access my router from the subnet - I guess this is
because the flows on the router say "anything from 213.170.3.0/26 goes
over this tunnel". Hmm. Is there any simple solution to this ?

Can I set up "exception" flows for anti-tunneling ?

rgds,
-- 
Peter Galbavy
Knowledge Matters Ltd
http://www.knowledge.com/