Print

Please login or register.
1 Hour 1 Day 1 Week 1 Month Forever
Login with username, password and session length

[bboyce]

I have a dfl800 and need a little help with a site to site vpn I am trying to setup. I am setting up a vpn tunnel between my organization and another company for access to specific servers. We have a range of routable ip addresses available to use and I want to use a different ip for the tunnel than the one that we use as the primary outgoing ip(lets say it is 10.10.1.1 and I want to use 10.10.1.2 for the tunnel), is this possible? I am not using wan2 at the moment, could I use that one for the tunnel?

Lets say the connection is setup and the tunnel is good to go. How can I make sure that users wanting to get to server x.x.x.x on the otherside of the tunnel are then directed out the ip 10.10.1.2 instead of going through the primary outgoing interface.

Hopefully that all makes sense, thanks.

[danilovav]

Could you please make a network schema?

[bboyce]

My normal traffic goes out on 1.2.3.4, I want to create a secure tunnel to a vendor that only allows routable ip addresses into their dmz through the tunnel. I can't use 1.2.3.4 as the routable ip address to create the tunnel with because they offer other services we use that are not part of the secure connection. I need to use 1.2.3.5 for the tunnel to connect to the vendor over the secure conneciton and 1.2.3.4 for everything else.

Basically traffic going to 5.6.7.8 needs to use the secure tunnel on 1.2.3.5 and all other traffic needs to go out like normal on 1.2.3.4.

I am not using wan2 so I could assign 1.2.3.5 to that location but all the documentation I could find online about setting up a site to site vpn shows passing internal 192.x.x.x on both sides and the vendor doesn't allow non routable ip addresses. And I couldn't figure out how to make sure traffic intended for a specific IP could be routed through the tunnel.

[Fatman]

PBR tables will allow you to differentiate traffic through whatever routes you want.

There is nothing different about using a routable address in an IPsec tunnel, just be mindful of your routes, which you will have to be anywho due to the above.