This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Site to Site VPN on one Interface

I have an ASG with 2 WAN connections and 4 LAN connections site 1 ( 192.168.1.X ) and another simple setup 1 Wan 1 Lan at site 2 ( 192.168.2.X )

I'd like to have a Tunnel from one of my LAN interfaces in Site 1 so that any device plugged into it would be an extension of site 2. Basically being a LAN extension of Site 2

I've tried a few things but I can't seem to bind it to one specific interface.

I'm somewhat new to the ASG world and have inherited a setup with no documentation so i'm making the best of what I have [:)]

Thanks

This thread was automatically locked due to age.

0 Scott_Klassen over 14 years ago

Astaro RED. Nice and simple. This is assuming that you have an Astaro at site 2, which you could use as the "base station" for the RED at Site 1.
Cancel
Vote Up 0 Vote Down

Cancel
0 jdale over 14 years ago in reply to Scott_Klassen

That would be the simple solution unfortunately we can't add anything else in our cabinet at the moment and there is no budget till last quarter to get new hardware.
Cancel
Vote Up 0 Vote Down

Cancel
0 Scott_Klassen over 14 years ago

Why not just an IPSEC site-to-site VPN then? These can be bound to an interface.
Cancel
Vote Up 0 Vote Down

Cancel
0 Scott_Klassen over 14 years ago

Why not just an IPSEC site-to-site VPN then? These can be bound to an interface.
Cancel
Vote Up 0 Vote Down

Cancel
0 jdale over 14 years ago in reply to Scott_Klassen

I could do that and use the DHCP from Site 2 to provide the IP's?
Cancel
Vote Up 0 Vote Down

Cancel
0 Scott_Klassen over 14 years ago

As long as you allow the traffic through packet filter rules it should work. DHCP uses UDP ports 67 and 68 as bcast messages.

Alternately, you can do a split scope. Let's say that right now, the DHCP server at site 2 scope is 192.168.2.2-254. Change it to 192.168.2.2-200. Then on the Site 1 Astaro, you can create a new DHCP server for the interface the site 2 clients will be connecting to that will hand out 192.168.2.201-254. Not saying that this is necessarily a better thing to do, but it is another option.
Cancel
Vote Up 0 Vote Down

Cancel