VPN and Routing in one box

VPN and Routing in one box

NewsGroups | Search | Tools
 comp.dcom.vpn  Post an article  get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content  add this group's latest topics to your Google content  YahooMyWeb Yahoo!  Google Google  Windows Live Favorites Windows Live  del.icio.us del.icio.us  digg digg  Add to Netscape Netscape
Subject Author Date
VPN and Routing in one box Fred Marshall 09-08-2007
Posted by Fred Marshall on September 8, 2007, 8:44 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
I need a router that can be a VPN end point AND will route packets coming
out of the VPN.

Any suggestions for a simple router that will do this?

Thanks,

Fred



NMFall 20%
Posted by Rick Merrill on September 9, 2007, 8:31 am
If you were  Registered and logged in, you could reply and use other advanced thread options
Fred Marshall wrote:
> I need a router that can be a VPN end point AND will route packets coming
> out of the VPN.
>
> Any suggestions for a simple router that will do this?
>
> Thanks,
>
> Fred
>
>

Check SonicWall - maybe.

Posted by Rome On Crestes on September 9, 2007, 9:02 am
If you were  Registered and logged in, you could reply and use other advanced thread options
Fred Marshall wrote:
> I need a router that can be a VPN end point AND will route packets coming
> out of the VPN.
>
> Any suggestions for a simple router that will do this?
>
> Thanks,
>
> Fred

Linksys RV042 will do that.

Posted by Fred Marshall on September 10, 2007, 2:49 pm
If you were  Registered and logged in, you could reply and use other advanced thread options

> Fred Marshall wrote:
>> I need a router that can be a VPN end point AND will route packets coming
>> out of the VPN.
>>
>> Any suggestions for a simple router that will do this?
>>
>> Thanks,
>>
>> Fred
>
> Linksys RV042 will do that.

Oh! How I wish that were true as I have a number of them on hand! I have
done a number things to make them do it and have become convinced that they
can't. I'd be very happy to be found deficient in my thinking / testing or
configuration.

Here is the scenario:

Subnet 1 < VPN > Subnet 2 > [router] > Subnet 3
192.168.1.0 192.168.2.0 192.168.3.0

Packets originate in Subnet 1, destined for Subnet 3.
The VPN (Subnet 1 end) is the first hop.
When packets arrive via the VPN at Subnet 2, they have to be routed to a
particular router / IP address on Subnet 2, which is the next hop in order
to be further routed to Subnet 3.
Thus, a route has to be effective at the Subnet 2 end of the VPN that sends
packets destined for Subnet 3 to the router on Subnet 2.
(The return path is already taken care of separately).

That route might look like this:
192.168.3.0 255.255.255.0 192.168.2.199 where .199 is the
address of the router on Subnet 2.

Here is the setup I used:

Subnet 1 < RV042 VPN > Subnet 2 > [router] > Subnet 3
192.168.1.0 192.168.2.0
192.168.3.0

The RV042 Tunnel goes from 192.168.1.0 to 192.168.3.0
The Subnet 2 RV042 VPN end LAN is on subnet 2.
The static route in the Subnet 2 RV042 points packets destined for Subnet 3
to the [router] on Subnet 2.

Packets destined for Subnet 3 are routed to the VPN on Subnet 1.
When they come out of the VPN, there needs to be something to tell them to
go to the [router] as the next hop.
Thus the static route.

I have rather conclusively shown that the static route does nothing. So, I
wonder what I'm missing?

---
What one can't do is to have the "forward" VPN Tunnel defined between Subnet
1 and Subnet 2. Then packets destined for Subnet 3 won't *enter* the tunnel
at the source end. Thus, it appears a static route at the receiving end is
necessary. Then a separate tunnel between Subnets 1 and 2 can be used as
the return path without this kind of problem.

Thanks,

Fred



Similar ThreadsPosted
VPN routing.... December 12, 2006, 12:26 pm
VPN routing October 15, 2007, 5:18 pm
Need help routing IPX over IPsec February 10, 2005, 11:35 pm
VPN and routing between branches July 21, 2005, 11:00 am
E-mail routing over VPN January 17, 2006, 11:50 am
openvpn and routing February 6, 2006, 12:50 pm
Cisco VPN Routing November 26, 2006, 9:06 am
VPN Internet routing problem January 10, 2006, 4:23 am
openvpn Routing Problem October 31, 2006, 7:58 am
VPN Routing Tables for Dummies? February 6, 2007, 5:25 pm

other useful resources:
The Federal Communications Commission (FCC)
Telecommunications Industry Association
Electronic and Software Security Products and Services
International Telecommunication Union

Custom CGI Perl and PHP programming by 1-Script.com

Contact Us | Privacy Policy
The site map in XML format XML site map