<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=us-ascii">
<META content="MSHTML 6.00.6000.16441" name=GENERATOR></HEAD>
<BODY>
<DIV><SPAN class=715403617-02062007><FONT face=Arial color=#000080
size=2>Hi,</FONT></SPAN></DIV>
<DIV><SPAN class=715403617-02062007><FONT face=Arial color=#000080
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=715403617-02062007><FONT face=Arial color=#000080 size=2>I'm
running IPCop firewall and have an openswap VPN between two sites. The
sites have multiple subnets behind the firewalls (intranet, dmz etc.), and
the VPN connects the two intranets. I'd like to provide access across
the openswan vpn to the dmzs from the other site. What is the best way to
do this?</FONT></SPAN></DIV>
<DIV><SPAN class=715403617-02062007><FONT face=Arial color=#000080
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=715403617-02062007><FONT face=Arial color=#000080
size=2>IPCop's VPNs have a policy of dropping anything which is for the "wrong"
subnet.</FONT></SPAN></DIV>
<DIV><SPAN class=715403617-02062007><FONT face=Arial color=#000080
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=715403617-02062007><FONT face=Arial color=#000080 size=2>I've
tried adding eroutes / routes through the VPN tunnel, which didn't work.
I've read the documentation, and can't see anything which would help
me.</FONT></SPAN></DIV>
<DIV><SPAN class=715403617-02062007><FONT face=Arial color=#000080
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=715403617-02062007><FONT face=Arial color=#000080 size=2>Is it
possible to simply create a tunnel (encrypted or non-encrypted) within the vpn
tunnel to carry the other traffic, or should I create another tunnel (preferably
using the same certificates) to carry this other traffic?</FONT></SPAN></DIV>
<DIV><SPAN class=715403617-02062007><FONT face=Arial color=#000080
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=715403617-02062007><FONT face=Arial color=#000080 size=2>Many
thanks in advance</FONT></SPAN></DIV>
<DIV><SPAN class=715403617-02062007><FONT face=Arial color=#000080
size=2>David</FONT></SPAN></DIV></BODY></HTML>