I have 3 machines. 2, routers, are connected over a VPN. The 3rd is a PC on the lan behind one of the routers.
internet
|
|
ROUTER S1 external: YYY.56.52.56 (eth0)
vpn: 10.0.0.1 (tun0)
|
|
ROUTER S2 vpn: 10.0.0.2 (tun0)
external: XXX.19.10.126 (eth0) -------------------internet
internal: 192.168.3.10, 10.19.26.10 (eth1)
|
|
LAN PC1 external: 192.168.3.16, 10.19.26.7 (eth0)
I want to move selected traffic from the LAN, over the VPN, out to the 'NET.
My routing policy on ROUTER S2 directs iptables-marked traffic from 10.19.26.0/24 so that it traverses the VPN.
From the router, ROUTER S2
ping -I 10.19.26.10 72.14.191.202
works - the ping request is correctly routed over the VPN, to the target, and the ping reply is received.
But from the lan behind it, LAN PC1
ping -I 10.19.26.7 72.14.191.202
doesn't. No response.
What specific route, on what machine, am I missing?