# general routing question...

**URL:** <https://forums.suse.com/t/general-routing-question/25873>\
**Category:** Chatting over the Back Fence\
**Created:** [July 17, 2014, 3:37pm UTC](https://forums.suse.com/t/general-routing-question/25873 "2014-07-17T15:37:05Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![System1](https://avatars.discourse-cdn.com/v4/letter/s/51bf81/32.png) [@System1](https://forums.suse.com/u/System1)\
**Post date:** [July 17, 2014, 3:37pm UTC](https://forums.suse.com/t/general-routing-question/25873/1 "2014-07-17T15:37:05Z")

</div>

I have two offices each with their own subnet. A perimeter firewall  
at each location is the default gateway and also provides a  
site-to-site VPN. I’m adding a private line between the offices with  
a router at each end. I plan to use DHCP to update end nodes to the  
new route path. And I will add the route to each of the nodes that  
have static IPs (such as servers). But is there any other way I can  
globally tell everything that the other subnet is now available  
through the router instead of the default gateway?

Thanks,  
Ken

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex022/uploads/suse/original/2X/5/5012ba89e3ffb5220dac47d5ea0ba032e2fe1cb6.png) [@system](https://forums.suse.com/u/system)\
**Post date:** [July 17, 2014, 3:52pm UTC](https://forums.suse.com/t/general-routing-question/25873/2 "2014-07-17T15:52:10Z")

</div>

On 17/07/2014 13:37, KeN Etter wrote:[color=blue]

> I have two offices each with their own subnet. A perimeter firewall  
> at each location is the default gateway and also provides a  
> site-to-site VPN. I’m adding a private line between the offices with  
> a router at each end. I plan to use DHCP to update end nodes to the  
> new route path. And I will add the route to each of the nodes that  
> have static IPs (such as servers). But is there any other way I can  
> globally tell everything that the other subnet is now available  
> through the router instead of the default gateway?[/color]

default gateway should do that itself.  
In addition to forwarding the packet to the router, it should send a  
icmp redirect packet to the sender telling it to send future packets  
direct to the router.  
Be aware though that some devices (notoriously cisco ASAs) not only  
don’t do that, but won’t route traffic back out the same interface it  
came in on without some ruleset fudging…

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex022/uploads/suse/original/2X/5/5012ba89e3ffb5220dac47d5ea0ba032e2fe1cb6.png) [@system](https://forums.suse.com/u/system)\
**Post date:** [July 17, 2014, 4:43pm UTC](https://forums.suse.com/t/general-routing-question/25873/3 "2014-07-17T16:43:55Z")

</div>

On Thu, 17 Jul 2014 12:52:10 GMT, Dave Howe [DaveHowe@invalid.dom](mailto:DaveHowe@invalid.dom)  
wrote:  
[color=blue]

> On 17/07/2014 13:37, KeN Etter wrote:[color=green]
> 
> > I have two offices each with their own subnet. A perimeter firewall  
> > at each location is the default gateway and also provides a  
> > site-to-site VPN. I’m adding a private line between the offices with  
> > a router at each end. I plan to use DHCP to update end nodes to the  
> > new route path. And I will add the route to each of the nodes that  
> > have static IPs (such as servers). But is there any other way I can  
> > globally tell everything that the other subnet is now available  
> > through the router instead of the default gateway?[/color]
> 
> default gateway should do that itself.  
> In addition to forwarding the packet to the router, it should send a  
> icmp redirect packet to the sender telling it to send future packets  
> direct to the router.  
> Be aware though that some devices (notoriously cisco ASAs) not only  
> don’t do that, but won’t route traffic back out the same interface it  
> came in on without some ruleset fudging…[/color]

Thanks Dave. I’m using Barracudas. I’ll look into that.

Ken
