VPN route to small /30 subnet just not getting there

ulink · Fri Feb 21, 2014 4:27 am

Put in a new backhaul on ether6 lan
172.16.5.0/24 with 172.16.5.1 on AP, 172.16.5.2 on client and 172.16.5.3 on ether6 interface. Here is the route I use:

add comment="Route for VPN to new backhaul" disabled=no distance=1 \
    dst-address=172.16.5.0/24 gateway=ether6 pref-src=172.30.74.10 scope=30 \
    target-scope=10

I have multiple subnets that I access through the VPN but this new one will not let me in. I can ping the ether6 IP from remote while on the VPN but it will not move my connection through to the radios on the link.
What am I missing?

Thanks in advance for your time.

ctyler · Fri Feb 21, 2014 7:22 pm

The /30 shouldn't be in the /24 you are using for your clients.

It should be something more like this:

172.16.1.0/30 for routers to talk to each other
-  Upstream router - 172.16.1.1
-  Downstream rotuer - 172.16.1.2
172.16.5.0/24 for clients and AP's

VPN route to small /30 subnet just not getting there

VPN route to small /30 subnet just not getting there

Re: VPN route to small /30 subnet just not getting there

Who is online