Changed source address based on destination IP

Hello,
Suppose I had the following configuration in an IOS router
interface <interface type/number>
ip address 1.1.1.3 255.255.255.0 secondary
ip address 1.1.1.2 255.255.255.0
ip route 0.0.0.0 0.0.0.0 1.1.1.1
access-list standard INTERNET_BOUND_ACL
permit <lan subnet-id> <lan wildcard>
ip nat inside source list INTERNET_BOUND_ACL interface <interface type/number> overload
I need to change the source inside global IP address based on the destination outside global IP address.
Example: I need our source IP to be 1.1.1.3 when I ping 8.8.8.8
How would i accomplish this?

Hi,
You would need to use two NAT pools and two different ACLs to separate your internal clients depending on the destination they want to communicate with, and to subsequently NAT them using a selected NAT pool. For example:
ip access-list extended NAT_2
permit ip <LAN Network> <Wildcard> <DestinationX> <WildcardX>
ip access-list extended NAT_3
permit ip <LAN Network> <Wildcard> <DestinationY> <WildcardY>
ip nat pool NATPOOL_2 1.1.1.2 1.1.1.2 netmask 255.255.255.0
ip nat pool NATPOOL_3 1.1.1.3 1.1.1.3 netmask 255.255.255.0
ip nat inside source list NAT_2 pool NATPOOL_2 overload
ip nat inside source list NAT_3 pool NATPOOL_3 overload
Exactly one of the ACLs should actually contain an entry saying
permit ip <LAN Network> <Wildcard> any
to make sure that the internal network gets translated to some of the two public addresses even if itt does not communicate with any specific destination IP.
Do you believe this could be a workable solution for you?
Best regards,
Peter

Similar Messages

Sources addresses need be changed.

I have a case which is showed in attachments.That is in pix outside interface changed the sourecs addresses as illustrate.How can I config the pix.
the changed sources addresses doesn't in the same network with the pix outside interface's.

Hi
i feel you want to change the source ip of the packets coming from outside world especially from the 3 networks mentioned in ur figure.
i feel you can make use of ip nat source outside source list command to modify the same.
But do remember you can configure this up in your router also refer this link for more info on the same..
http://cisco.com/en/US/tech/tk648/tk361/technologies_configuration_example09186a0080093f8e.shtml
regds

How is NTP reply routed when requesting router uses loopback as source address

The Cisco NTP Best Practices White Paper and DISA STIGs recommend setting the NTP source address to a loopback interface (e.g. "ntp source loopback0").
But this only seems to work if the requesting (NTP client) router is the default gateway for the NTP server.
Specifically, the NTP server will attempt to reply to the requesting router's loopback-based source address (taken from the NTP request packet). Since that address will always be non-local from the perspective of the NTP server, the NTP server will encapsulate the reply in a Layer 2 frame addressed to its default gateway. If the gateway was the source of the original NTP request, that should work. But in most other situations that gateway won't know how to reach a loopback-based address, and will discard the reply.
I have verified this in tests with routers running both 12.4 and 15.1 releases (and NTP debugging enabled). When the NTP source is a loopback address, NTP replies never reach the requesting router. With the default NTP source address (i.e. based on the exit interface) everything works fine.
Obviously, you could employ workarounds, such as static routes or injecting loopback addresses into your routing protocols. But that seems uglier than leaving NTP source addresses at their defaults.
Why is this "best practice" so commonly advocated without mention of some significant caveats regarding routing? Am I missing something?
Thanks,
Mark

Michel:
Thanks for the response. Actually, I understand what kind of routing workarounds could allow NTP to function in spite of this "best practice." But I am mystified as to why a Cisco "NTP best practice" paper (http://www.cisco.com/en/US/tech/tk869/tk769/technologies_white_paper09186a0080117070.shtml) and various security policies would call for setting a loopback address as the NTP source when that practice will often cause more problems than it solves.
The stability of a loopback address is nice when that address is used to uniquely identify the platform for a routing protocol or syslog. A loopback-based source address can also simplify ACL management, since that address won't change if an interface or link failure forces the router to send traffic from a different interface. But I keep seeing security configuration guides/policies that call for also using a loopback address as the source for two-way protocols, such as FTP and NTP. That just doesn't make sense to me when you balance the routing implications against the limited security benefits (stable device identification, simplified ACL maintenance, and obfuscation of device addresses).
I was hoping to learn that some obscure command might allow me to control which NTP exchanges use the loopback-based source address. For example, the loopback source address would work fine on outgoing NTP broadcasts (and probably in replies from NTP servers). But I would prefer that NTP client requests use a source address based on the exit interface. That way replies can be routed back to the client without cluttering up routing tables with routes to loopback addresses.
So far, it looks like I'll need to chalk this up to poor coordination between the network security and network administration communities.
Thanks again,
Mark

Imanager source address type Network

I am trying to add a range of ip address as a filter exception through
iManagers NBM filter management snap-in. If I add an individual host or
use "any address" it works fine, however, if I select "Network" as the
Source Address type (or destination address type), when I click next
nothing happens (I.E. responds as if next was not clicked).
I have tried various combinations for the address and subnet, but none
seem to work. What I THINK belongs there is:
Network
10.117.12.0
255.255.255.0
Is this a known bug, or am I just missing something obvious? Is there a
workaround?
Thanks for any help you can provide.
BM 3.8sp4 on NW 6.5 sp5 (plus post patches).
Daryl

In article <V9WNg.2780$[email protected]>, Caterina
Luppi wrote:
> i've the VAGUE recollection of this being reported as a bug.
>
I have exactly the same vague recollection, and offer the same excuse
for not using iManager for filtering!
Craig Johnson
Novell Support Connection SysOp
*** For a current patch list, tips, handy files and books on
BorderManager, go to http://www.craigjconsulting.com ***

Insert data into oracle based on sql server data(here sql server acting as source to oracle and destination to oracle)

Source is Oralce. Destination is SQL Server.
Requirement - I have to fetch sql server server data (empid's) based emp table and send this as input data to oracle to fetch and empid's are common.
I cannot use merge or loopkup or for each as oracle have too many records.
For example - In MS SQL - i have empid=1,2..Only these records, I have to fetch from oracle source into sql server destination. For this, I have adopted the below approaches...The major problem I face, when i build a empid's as a string, it is taking only
4000 chars. My string lenght is 10000. How do I breakup this string lengh and send to data flow task till all broken strings length passed to DFT.
Approach-1
created two variables - oraquery string, empid string
step1 - ms sql database - created sql task - declare @empid varchar(max)
SELECT @empid=
Stuff((SELECT ',' + empid
        FROM
        (SELECT DISTINCT convert(varchar(10),empid ) empid FROM emp
         ) x
        For XML PATH ('')),1,1,'')
select @empid =    '(' + @empid + ')'
select @empid
resultset=singlerow
resultset=resultname=0; variablename=User::empid (empid is declared as string)
step2 - oracle database - created data flow task
created oledb source
I put this statemnt in oraquery expression - "select * from dept where dept in "
+ @[User::empid] + "
expression=true
[OLE DB Source [1]] Error: SSIS Error Code DTS_E_OLEDBERROR. An OLE DB error has occurred. Error code: 0x80040E14.
An OLE DB record is available. Source: "Microsoft OLE DB Provider for Oracle" Hresult: 0x80040E14 Description: "ORA-00936: missing expression".
Approach-2
created three variables - oraquery string, empid int, loop object--when I put int then it is automatically setting to 0
step1 - ms sql database - created sql task - SELECT DISTINCT convert(varchar(10),empid ) empid FROM emp
resultset=fullresult
resultset=resultname=0; variablename=User::loop
step2 - created a for each loop container
for loop editor - for each ado ennumerator
enumerator configuration - loop
variablemapping - variable=empid;index=0
step3 - oracle database - created data flow task (outside for each loop. If I put inside it is taking long time)
created oledb source
I put this statemnt in oraquery expression - "select * from dept where dept in "
+ @[User::empid] + "
expression=true
Data inserting in a destination table but empid=0.

Sorry didnt understand if your step3 is outside loop how
@[User::empid] will get values for the empids from User::loop. The iteration happens inside loop so you
need to have a logic to form the delimited list inside using a script task or something and concatenating everything and storing to variable @[User::empid]
. Then only it will have full value used to be used in step3 query
Please Mark This As Answer if it helps to solve the issue Visakh ---------------------------- http://visakhm.blogspot.com/ https://www.facebook.com/VmBlogs

Change the source address in socket

Hi all,
I need some help here. I need to write a program to forward the UDP message received to another machine.
The requirement form my boss is that the source ip field must remain the same as when I receive it. However, when I forward the message, the socket will automatically change the source to my machine's address.
How can I do this? any idea?
Actually, I am not even sure this can work. A fake source ip address at the IP layer. will this work?
Please advices. thanks
Alan

Have you resolved your problem with change the source address in socket yet ???

ACE source IP based predictor

Hi
I know that if we use source IP based predictors, the ACE would use a hash of the source IP to load balance the traffic. Is there is capability to make this process deterministic. In other words, I have tthree client subnets accessing the web servers on the same VIP. I want the traffic from subnet 1 to go to server 1 and traffic from subnets 2 and 3 to be loadbalanced to the rest of the servers
any idea on how to get this done ?

HI Dinuka,
Session persistence (stickiness) based on client source IP address or HTTP cookies are recommended to be configured on the Cisco ACE for this flow.
IP Address Stickiness
You can use the source IP address, the destination IP address, or both to uniquely identify individual clients and their requests for stickiness purposes based on their IP netmask. However, if an enterprise or a service provider uses a megaproxy to establish client connections to the Internet, the source IP address no longer is a reliable indicator of the true source of the request. In this case, you can use cookies or one of the other sticky methods to ensure session persistence.
Here can be the sample configuration:
resource-class websrv
limit-resource all minimum 0.00 maximum unlimited
limit-resource sticky minimum 20.00 maximum equal-to-min
rserver host webserver1
ip address 10.10.10.1
inservice
rserver host webserver2
ip address 10.10.10.2
inservice
rserver host webserver3
ip address 10.10.10.3
inservice
serverfarm host werbsrv1only
probe websrv
rserver webserver1 1000
inservice
serverfarm host werbsrv123
probe websrv
rserver webserver1 1000
inservice
rserver webserver2 1000
inservice
rserver webserver3 1000
inservice
ACE receives requests to the VIP on port 80 and translates them to port 1000 using the server farm configuration shown above.
The link to the websrv home page is http://websrv:1000/index.html. A probe to this link is configured on ACE as follows:
probe http websrv
port 1000
interval 2
faildetect 2
passdetect interval 2
request method get url /index.html
expect status 200 200
Session persistence can be established by tying the session to an IP address, that uniquely identifies the client.
Create a sticky-group
sticky ip-netmask 255.255.255.255 address source Client_subnet_1
timeout 10
serverfarm werbsrv1only
Change the server farm to the sticky-group:
policy-map type loadbalance first-match basic-slb
class class-default
sticky-serverfarm werbsrv1only
sticky ip-netmask 255.255.255.255 address source Client_subnet_2
timeout 10
serverfarm werbsrv123
sticky ip-netmask 255.255.255.255 address source Client_subnet_3
timeout 10
serverfarm werbsrv123
Here you can find the details in the below url :
http://www.cisco.com/en/US/docs/app_ntwk_services/data_center_app_services/ace_appliances/vA3_1_0/configuration/slb/guide/sticky.html#wp1004411
I have also attached a jpeg for your reference.
Hope you will get the idea how to use the sticky based on IP address.
http://www.cisco.com/en/US/docs/app_ntwk_services/data_center_app_services/ace_appliances/vA3_1_0/configuration/slb/guide/sticky.html#wp1004411
Here you can find sample config of similar type:
http://www.cisco.com/en/US/prod/collateral/modules/ps2706/ps6906/prod_white_paper0900aecd804edab0.html
Thanks and regards,
Sachin Garg
Senior Specialist Security
HCL Comnet Ltd.
http://www.hclcomnet.co.in
A-10, Sector 3, Noida- 201301
INDIA
Mob: +91-9911757733
Email: [email protected]

Change vendor address using bapi

Hi all,
How to change vendor address using bapi.
The address,and vendornumber coming from XL file.
Based on the vendor number I want to change the address.
Please give me the example.
regards,
rakesh.

Hi Vijay,
Please help me in the following.
As Vendor/Customer Master dont have all the address fields ( like Street4-5), we use FM BAPI_ADDRESSORG_SAVEREPLICA to overcome this problem.
In my case i have created one Custom load program to upload address data using
BAPI_ADDRESSORG_SAVEREPLICA and then LSMW project to upload rest of the data.
In this case when i upload rest of the data by LSMW using BI standard program ( having NODATA indicator "/" in my source file for the fields already uploaded using BAPI above) , address data which uploaded through FM should get populate automatically (by concept of Central Address management) but in my case <b>for some of the Account Group it is not getting populated,</b> please suggest.
regards
Sonal

Prioritize traffic based on destination IP?

Hi all, we're looking to use an ASA5505 or 5510 as our firewall but want to see if one of them can help us prioritize traffic. I know it does QoS but we're wanting to dedicate x amount of our bandwidth to traffic based on destination IP address. Is that possible and does it take a license upgrade?
Thanks!

Jerry, i would try something like in the second config example I mentioned. keep in mind, if ISP doesn't support marking packets, it may be hard to QoS inbound. if you assign the VOIP traffic high priority, it should go out interface first during congestion. Don't need to dedicate a certain amount of bandwidth in any way. Make sure in the design to keep the VOIP traffic, VPN traffic and User PAT (outbound NAT) traffic on separate IP's. That will help when defining the access-lists. This QoS stuff is kind of tricky and is bit confusing. I have setup a few configs according to the above examples and they _seem_ to work. I ran a policing queue on the edge router for traffic leaving to ASA, and ran a priority queue on the ASA. When i test big download from a major site, which could consume all bandwidth, it doesn't appear to clobber VOIP traffic. The same results apply, when I test a big upload to internet. The QoS stuff is tricky though, and i _didn't_ see what I expected when i use the show QoS commands to see traffic drops, etc. so YMMV!
Take a look at this link for ASA 7.X release, which may give you some ideas:
"QoS based on ACL with VPN Configuration" You can change ACL to include the outside interface IP as long as you have separated the NAT's, VPN, etc. like i mentioend earlier.
http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a008080dfa7.shtml
Will

Is there a way to change the addresses used in an existing iMessage thread?

This is kind of a multi-part question. Let me describe my scenario.
I have many iMessage threads with other iPhone users where the "reply" addresses for one or both ends are the phone *numbers* instead of AppleID email addresses. (This could be due to a number of factors... either they had their "Start new conversations from" address set to their phone number, and/or they started a new conversation with me sending it to my phone number. How it *got* that way doesn't really matter). I want to be able to change the addresses of the conversation to AppleID's (so that I'll still get messages when I change SIM cards, among other reasons).
With iOS 8's new ability to add/remove people from conversations, I thought I would be able to add the AppleID address and remove the phone number address, but there are two problems with that: 1) iOS 8 seems to only allow this for conversations which began as multi-person conversations, and 2) it doesn't seem to want to let you add addresses for people who are already recipients via another address (in other words, if Alice is already on the conversation via her phone number, I can't add her AppleID to the conversation). I guess I could remove the person first, and then re-add them with the other address... but I'd feel safer if I could add the next one before removing the first one.
I know I could just tell the other person to delete our thread and start a new one, but I don't want to lose all of our dialogue and pictures (and I don't want to have to manually save it).
So, the questions:
Is there a way to change the address my counterparty is sending to when they make further replies to our conversation?
Is there a way to change the address I send to when I make further replies to the conversation?
Is there a way to change the default address to use when trying to send someone an iMessage? (What I'm after here is a way to craft my "contact" entry in people's phones so that, when they try to send a message to me and start typing my name, my preferred address comes up on top).
As it looks like the only way to do this might be to use iOS 8's method of adding/removing recipients, is there a way of converting a two-person conversation into a multi-person one?

I think I may have solved it, actually. I find that if I switch the timecode to NDF in the source viewer, it seems to work. I have tried it on three clips and they have sync'd without problems. Hopefully this will continue to be the case.

Can't change MAC address of my wireless card on Windows XP

Dear Forum Members,
I have recently bought a notebook, Lenovo IdeaPad G550L (I haven't found section for the G series here on the forum) and would like to use its WiFi adapter (BCM4310 according to Everest) with explicitly changed MAC address. I installed the recommended driver, available from Lenovo's website, version 5.10.38.14. I tried the common way to change the MAC address, went to Control Panel -> Network Interfaces -> Broadcom Wireless Network Adapter -> Configure... -> Advanced -> Locally administered MAC address, and changed it to a different address (without ":" or any separator characters). Unfortunately this common solution won't work at all. Although, no error messages are produced when changing it (so it seems successful) my wireless router shows me the original MAC address of my integrated wifi card. Tried to restart my computer, my router, everything.
* Tried different drivers, downloaded a driver from HP which had a separate wireless configurator, Broadcom Wireless Utility. It worked like the driver from Lenovo (except this one hasn't got the utility), but I was still unable to change my MAC address.
* Tried a different driver from SoftPedia, version 5.10.79.14 (this is newer than Lenovo's), it didn't work either.
* Tried Nathan True's MACShift utility. It seemed to change the MAC address, but my router showed the original, so it didn't.
* Tried to look for official Broadcom drivers on www.broadcom.com but found nothing for BCM4310.
* Finally, I booted my alternative OS, the latest Ubuntu Linux, and used the kernel driver b43 for my wireless adapter. I tried to change my MAC address using the command ifconfig wlan0 hw ether .... and connected to my network. It worked, my router showed the changed MAC so the hardware (or the firmware) is capable of doing this by the right driver/firmware.
I tried to address Broadcom with the issue, sent them a letter like this post they replied that they are not competent, they wrote the following (I guess this was an automatically generated message because it got back in 10 seconds ) from [email protected]:
"As the chipset supplier, Broadcom provides driver support to our customers - the manufacturers of wireless devices - that ultimately provide products to end customers, such as wireless LAN vendors, cable modem vendors, and notebook providers. It is up to these manufacturers to provide product-specific drivers and software support to their end customers. Please contact the manufacturer of your wireless device for their current drivers"
Then I addressed Lenovo with the problem, their answer:
"Dear ******,
Thank you for contacting Lenovo, the makers of ThinkPad and ThinkCentre products. As I understand, you have purchased a Lenovo IdeaPad G550L and would like to use its WiFi adapter (BCM4310 according to Everest) with explicitly change MAC address.and you would like to know is there an official driver for Windows XP that allows you this basic feature like b43 in Linux. We apologize,Please do speak with our Idea pad technical Team at 877-453-6686 Option 1-2-1-2 for further assistance.
If you have further questions or concerns, please feel free to contact us at 866-42-THINK (84465) option number 2. We will be happy to assist at that time.
Once again, thank you for contacting Lenovo.
Sincerely,
Lenovo Websales/CustServe"
So this means I should call them and spend extra money for phone bill of international calls because of their fault of providing a basic feature that is to be expected from every single wireless card in the market. Should I believe that a guide over the phone is more efficient than a step-by-step solution or a link to an alternative driver? I'm getting kind of disappointed. At least they have understood (or copy-pasted) my problem, dutch comfort though.
Any ideas? Anyone experienced the same problem and solved it? Is there an official (or even unofficial) driver for this device for Windows XP that allows me this basic feature (like b43 in Linux)?
Thanks in advance,
str4ngS

Yes, I have posted this thread to different forums after I realized that Lenovo "customer care" is not likely to help me out and even wirelessforums.org members couldn't come up with any ideas for days, that's why. I have already written that helper applications like SMAC (or etherchange or macshift) don't work, because they do the same thing in the system as I change it in the driver panel, so they use the same method which simply does not work.
Locked? Definitely not. If yes, why can I change the MAC of my adapter under Ubuntu Linux using b43 open-source driver if it's really locked? Or you mean it's locked from software, because Lenovo or Broadcom didn't want their users to change their MACs or they just forgot to release a fully-functional driver? Well, then I would like to have a driver in which it's not locked, because this is a basic feature of my adapter of which the hardware is capable.
I have already contacted Broadcom, see their (automatically-generated) answer in my initial post, but I will try to do that again with more foresight.

SSIS 2012 is intermittently failing with below "Invalid date format" while importing data from a source table into a Destination table with same exact schema.

We migrated Packages from SSIS 2008 to 2012. The Package is working fine in all the environments except in one of our environment.
SSIS 2012 is intermittently failing with below error while importing data from a source table into a Destination table with same exact schema.
Error: 2014-01-28 15:52:05.19
   Code: 0x80004005
   Source: xxxxxxxx SSIS.Pipeline
   Description: Unspecified error
End Error
Error: 2014-01-28 15:52:05.19
   Code: 0xC0202009
   Source: Process xxxxxx Load TableName [48]
   Description: SSIS Error Code DTS_E_OLEDBERROR. An OLE DB error has occurred. Error code: 0x80004005.
An OLE DB record is available. Source: "Microsoft SQL Server Native Client 11.0" Hresult: 0x80004005 Description: "Invalid date format".
End Error
Error: 2014-01-28 15:52:05.19
   Code: 0xC020901C
   Source: Process xxxxxxxx Load TableName [48]
   Description: There was an error with Load TableName.Inputs[OLE DB Destination Input].Columns[Updated] on Load TableName.Inputs[OLE DB Destination Input]. The column status returned was: "Conversion failed because the data value overflowed
the specified type.".
End Error
But when we reorder the column in "Updated" in Destination table, the package is importing data successfully.
This looks like bug to me, Any suggestion?

Hi Mohideen,
Based on my research, the issue might be related to one of the following factors:
Memory pressure. Check there is a memory challenge when the issue occurs. In addition, if the package runs in 32-bit runtime on the specific server, use the 64-bit runtime instead.
A known issue with SQL Native Client. As a workaround, use .NET data provider instead of SNAC.
Hope this helps.
Regards,
Mike Yin
If you have any feedback on our support, please click
here
Mike Yin
TechNet Community Support

Shopping cart default delivery address based on company code

Hi All,
As a standard behaviour of SRM, currently delivery address in shopping cart is defaulted from attribute (ADDR_SHIPT). But in our case we use cross company purchasing where requisitioners buy for different company codes.
Some times, they forgot to change the default dlivery address and shopping carts are getting created with wrong delivery address.
Is there any way, the we can default the delivery address based on company code selected by the user instead of defaulting from user attribute?
Suggestions would be greatly appreciated.
Regards,
Krish

Hi Krish,
Am looking for a same solution but instead of delivery address, we are looking for change in invoice recipient address
ADDR_BILLT. For this i have identifed a FM: BBP_GET_BILL_TO_PARTY from which system pulls the defaulted attribute of user profile. Now we are in a change of pulling the attribute defaulted to the company code entered in SC rather than the user's defaulted ADDR_BILLT.
Similarly i guess for your issue you can use the FM: BBP_GET_ORG_SHIPTO_ADDR implementing a enhancement in DOC CHANGE BADI
Regards,
Nihar

NI XNET in LabView: Transmitting source address along with signal

Hi all!
Does anyone know a way to transmit a user-determined source address along with a specific signal (J1939)? I'm outputting a signal from CVI with nxWriteSignalSinglePoint and reading it with CANalyzer, which says that the source address is NULL (254). Is there a way to set this or would I have to transmit the whole frame (maybe doing the raw bits format)? Thanks in advance!

Hey BLowery,
Given that this is a more XNET-oriented question, I would recommend asking this type of question on the Embedded Networks forum page rather than the CVI Forum since that's where user dealing with CAN and J1939 reside.
Embedded Networks Forum:
http://forums.ni.com/t5/Automotive-and-Embedded-Networks/bd-p/30
However, if you are wanting to be able to specify the source address manually in the 29-bit extended arbitration ID, as J1939 requires, it wouldn't be too hard, but you can't do it with Signal session. A Signal session uses the CAN database file to determine the ID and parameters of the frame to be sent automatically, and you simply provide the signal data. To be able to edit the ID yourself, a Frame Stream session that doesn't rely on a database would be required, since it would allow you to provide the ID manually.
I recommend taking a look a this white paper, which shows how to use XNET with the J1939 standard. In the sample code that they provide, there is an example using a Frame Out Stream session which edits the ID manually based on the user's input.
http://www.ni.com/example/31215/en/
Regards,
Ryan

Can we do MAC Address based routing in ASA5540

I have a network setup where two servers from inside need to communicate with a remote network via 2 VPN gateways. The destinations are same.
However, the chalange is each server need to follow it's own VPN gateway. Since i can't configure PBR (policy based routing) in ASA, can i configure something like MAC Address based routing. I can't use destination based routing since the remote network are reachable from the both VPN Gateways.
Advise needed.
Thanks in advance.
Regards,
R.Siva
Network Security Engineer.

Hi
I am not shure i follow you correct here.
You want 2 servers to speak to the same network but over two different vpn units ?
If this is so then this could work
Just set the route to the other network on server 1 to the vpn gate 1
and route the other network from server 2 to the vpngate 2.
in windows the command is route add.
good luck
hth

Changed source address based on destination IP

Similar Messages

Maybe you are looking for