Hi Everyone,<br><br>I need connect to a device that is attached to several remote networks within the <a href="http://10.0.0.0/8">10.0.0.0/8</a> range. Rather than creating several tunnels I just summarized the remote subnet as <a href="http://10.0.0.0/8">10.0.0.0/8</a>. The problem is that this includes my own local subnet so when locally connected hosts attempt to access the VPN device at 10.11.11.1, they are unable to as it appears that this traffic gets redirected onto the tunnel.<br>
<br>I've seen other similar posts but no responses. So, I am wondering whether or not there is an option to exclude a range of addresses from the right/leftsubnet.<br><br>conn tunnel-1<br> left=172.16.1.2<br> right=192.168.1.2<br>
leftsubnet=<a href="http://10.11.11.0/24">10.11.11.0/24</a><br> rightsubnet=<a href="http://10.0.0.0/8">10.0.0.0/8</a> -----> want to exclude <a href="http://10.11.11.0/24">10.11.11.0/24</a> from this<br>
ike=aes128-sha1<br> ikelifetime=28800s<br> aggrmode=no<br> esp=aes128-sha1<br> keylife=3600s<br> rekeymargin=540s<br> type=tunnel<br> pfs=yes<br> compress=no<br>
authby=secret<br> auto=start<br><br>Thanks!<br><br>Robyn<br>