Hi, All
I met an issue that I need LAN as the gateway ,but wan was not working. Here is my configuration:
vpn# run show configuration | strip-private
firewall {
all-ping enable
broadcast-ping disable
config-trap disablessh
ipv6-receive-redirects disable
ipv6-src-route disable
ip-src-route disable
log-martians enable
receive-redirects disable
send-redirects enable
source-validation disable
syn-cookies enable
twa-hazards-protection disable
}
interfaces {
ethernet eth0 {
address xxx.xxx.74.61/29
duplex auto
smp-affinity auto
speed auto
}
ethernet eth1 {
address xxx.xxx.0.121/22
duplex auto
smp-affinity auto
speed auto
}
loopback lo {
}
}
nat {
source {
rule 120 {
outbound-interface eth1
source {
address xxx.xxx.255.0/24
}
translation {
address masquerade
}
}
}
}
protocols {
static {
route xxx.xxx.0.0/0 {
next-hop xxx.xxx.0.252 {
}
}
route xxx.xxx.74.56/29 {
next-hop xxx.xxx.74.57 {
}
}
}
}
service {
ssh {
port 22
}
}
system {
acceleration {
}
config-management {
commit-revisions 100
}
console {
device ttyS0 {
speed 9600
}
}
domain-name xxxxxx
host-name xxxxxx
login {
user xxxxxx {
authentication {
encrypted-password xxxxxx
plaintext-password xxxxxx
public-keys [email protected] {
key xxxxxx
type ssh-rsa
}
}
level admin
}
}
name-server xxx.xxx.0.8
ntp {
server xxxxx.tld {
}
server xxxxx.tld {
}
server xxxxx.tld {
}
}
syslog {
global {
facility all {
level info
}
facility protocols {
level debug
}
}
}
}
vpn {
ipsec {
ipsec-interfaces {
interface eth0
}
nat-networks {
allowed-network xxx.xxx.0.0/0 {
}
}
nat-traversal enable
}
l2tp {
remote-access {
authentication {
mode radius
radius {
server xxxxx.tld {
key xxxxxx
}
}
}
client-ip-pool {
start xxx.xxx.255.2
stop xxx.xxx.255.254
}
dns-servers {
server-1 xxx.xxx.0.8
}
idle 1800
ipsec-settings {
authentication {
mode pre-shared-secret
pre-shared-secret xxxxxx
}
ike-lifetime 3600
lifetime 3600
}
outside-address xxx.xxx.74.61
outside-nexthop xxx.xxx.0.121
}
}
}
