Linksys VPN hairpin?

[mingtmak]

Is this setup possible?

Linksys1 --(VPN)--> Linksys2 --(VPN)--> NetscreenFW

Linksys1 (BEFVP41) - 192.168.8.x
Linksys2 (BEFVP41) - 192.168.7.x
NetscreenFW - 192.168.1.x

Linksys2 has site-to-site VPNs to both Linksys1 and NetscreenFW. Is it possible for Linksys1 to connect through the tunnels to NetscreenFW? Would it require static routes or RIP to be setup? On which routers would it be needed to be setup?

I'm having troubles configuring the VPN between Linksys1 and the NetscreenFW. It's a Netscreen-10, and there isn't much documentation on it. I don't even know if it can support the 2 site-to-site tunnels. So I'm trying to find out if the above is an alternative.

Thnx!

- Jon

 

[SYQUEST]

Juniper discontinued making those units in NOV2002. If you haven't tried Juniper's website here is a link:

http://www.juniper.net/customers/support/products/netscreen10.jsp

See if their knowledgebase has anything that might help you.

....JIM....

 

[mingtmak]

Yeah, unfortunately the client won't commit to moving to a new piece of hardware until all options have been exhausted.

- Jon

 

[brianinms]

Why don't you configure a tunnel from Linksys 1 to the netscreen?

 

[mingtmak]

They had initially had a dynamic IP at Linksys1 location. Was having a difficult time getting the tunnel up.
They just recently moved to a static IP but I haven't had time to commit to get it up. I just wanted to see if this was a valid interim solution as I had got the tunnel up between Linksys 1 and 2 in about 5 min.


- Jon