Add routes on fw node to VPN subnets via concentrator.

bin/setup-driver.sh

@@ -81,6 +81,20 @@ if [ -n $aggprefix ] ; then
     ip route add 192.168.0.0/16 via $agg_gw
 fi
 
+#
+# The firewall node also needs routes to the VPN networks via the
+# concentrator.
+#
+if [ $HOSTNAME = "fw" ]; then
+    for aggprefix in $AGGREGATES ; do
+	agglan="${aggprefix}lan"
+	eval "varname=${agglan}_CIDR"
+	eval "agg_cidr=\$$varname"
+
+	ip route add $agg_cidr via $con_conlink_IP
+    done
+fi
+
 # Mark things as done right here, it's safe.
 touch $OURDIR/setup-driver-done