After a long time I'm again in this thread because I kind of need a little weird suggestion
I have to build a 6in4 tunnel from my R7000 to an endpoint.
Exactly as I needed before.
Unfortunately, this time I can not do it directly but I have to go through a VPN.
So, I launch this VPN on the router and if a build the tunnel from my pc everything works fine.
If I do it on the same router though, it doesn't work because the static route I set gets deleted as soon as I enable the IPv6 tunnel.
What I need is something like this
route add -host IP_endpoint dev tun12
route add -host IP_endpoint gw IP_VPN_gateway dev tun12
to be remembered as soon as I launch the IPv6 tunnel...
If a do a traceroute from the router as soon as I enable IPv6 I notice that the connection doesn't go through the VPN if I point to the endpoint. (the vpn is needed ONLY for the connections to that endpoint and I have a policy for that)
I have to add the static route again... so the traceroute is correct but considering I enabled the tunnel on a wrong route, the tunnel didn't work and it doesn't matter if a add the correct route AFTER the tunnel has been built.
I don't know if I explained myself
In this moment I'm trying on Tomato but I assume it's the same...
How can I be sure the tunnel goes through the VPN?
On tomato if a set the policy on gui in vpn settings, on my pc I notice the traceroute works fine anyway.
The problem is that I need 192.168.1.1 to go through the vpn (I assume the tunnel is built from 192.168.1.1) but I don't know how to do it without messing up everything every time.
So, doing a recap:
- VPN on R7000 to a machine that is authorised to build this tunnel from its IP to some endpoint (with the policy that makes only those connections to that endpoint to go over the vpn)
- 6in4 tunnel to this endpoint over that VPN
The tunnel works on my Mac but I don't like the firewall part...
Thanks in advance for any suggestion!