Connecting two home networks over VPN tunnel

[mmilicev]

Hi,

Have successfully created an IPSec VPN tunnel between two points over the internet. The tunnel is stable using on one end - Biguard 30 and on other VPN-1 EDGE X. Know this EDGE is an old hardware but both are capable of encripting data at +20Mbit speeds. Connection on both ends is optic 20 Mbit.
On both ends there is a local home network with different IP pools i.e. 192.168.1.X and 192.168.100.x.

Now i'm trying to connect these home networks to see each other like they would be at the same location, meaning ping, data share, games ....

While browsing throu the net have read IPsec is not suitable for my requirements ... is that right ???
If not how should i achieve needed tunnel, different protocol maybe PPTP - both routers can encript over pptp at 10Mbit sec speed.

If yes what else should i do ... something to do with static routes or ....?

Thanks for all your help.

Brgds
Milos

 

[burtsbees]

It is attainable with IPSEC---they are talking the way NAT works. If there is a NAT box in between the VPN boxes, you would wrap the header into its own UDP wrapper (NAT Traversal). If it is in the VPN box, then you simply exclude the vpn pool addresses (crypto acl) from being NATted.

/

tim@tim-laptop ~ $ sudo apt-get install windows
Reading package lists... Done
Building dependency tree
Reading state information... Done
E: Couldn't find package windows...Thank Goodness!

 

[mmilicev]

Thanks Burtsbees,

Not sure if i understand what you wrote, but know both VPN devices in this case routers have port restricted NAT type.
Do guess it is in the VPN box then.

How do i .. or what does it mean "simply exclude the vpn pool addresses from being NATted"...

Thanks for your support.
Milos

 

[burtsbees]

Sounds like PAT.

I should have been more clear---you would need a crypto acl, or specify in the vpn routers, the private ip address subnets in the LAN at each location. In site a, you would have deny ip (site a) to (site b) in the NAT statement, and the opposite in site b (deny NAT from b to a). I am not familiar with those boxes, but they may not support this or NAT Traversal...

/

tim@tim-laptop ~ $ sudo apt-get install windows
Reading package lists... Done
Building dependency tree
Reading state information... Done
E: Couldn't find package windows...Thank Goodness!