![VyOS / Vyatta 在 IPSec 隧道一侧有多个 CIDR 块](https://linux22.com/image/653213/VyOS%20%2F%20Vyatta%20%E5%9C%A8%20IPSec%20%E9%9A%A7%E9%81%93%E4%B8%80%E4%BE%A7%E6%9C%89%E5%A4%9A%E4%B8%AA%20CIDR%20%E5%9D%97.png)
我正在尝试使用社区 VyOS AMI 和 IPSec 隧道将 AWS VPC 链接到数据中心,与我无法控制的 SonicWall 设备通信。我已经获得了建立隧道的正确设置,但我需要通过它将流量传递到两个 CIDR 块,如下所示:
10.54.0.0/16 >> 10.64.0.0/10 和 10.64.0.0/9
我有流量通过隧道传输到 10.64.0.0/10,但还需要路由到其他块。我可以用一个隧道来实现这一点吗?
编辑:这是相关的配置信息,为了安全起见,已经清理:
esp-group espGroup1 {
compression disable
lifetime 28800
mode tunnel
pfs enable
proposal 1 {
encryption aes128
hash sha1
}
}
ike-group ikeGroup1 {
key-exchange ikev1
lifetime 28800
proposal 1 {
dh-group 2
encryption aes128
hash sha1
}
}
site-to-site {
peer <IP> {
authentication {
id <local IP>
mode pre-shared-secret
pre-shared-secret X
}
connection-type initiate
default-esp-group espGroup1
description "Tunnel"
ike-group ikeGroup1
local-address 10.54.0.5
tunnel 1 {
allow-nat-networks disable
allow-public-networks disable
local {
prefix 10.54.0.0/16
}
remote {
prefix 10.64.0.0/10
}
}
tunnel 2 {
allow-nat-networks disable
allow-public-networks disable
local {
prefix 10.54.0.0/16
}
remote {
prefix 10.128.0.0/9
}
}
}
}