VPN through two NAT firewall's

[axsom1]

Is this possible? If so, where am I going wrong at?

Here is out setup:

We have a full T1 connected to a cisco 2600 series router. The router is connected to a Sonicwall Pro 300. From there it is NAT'ed to our LAN which is 127.x.

Now, as the years have passed we have needed to expand, and my boss does not like to subnet so we stay with class c addresses. We had to add another network and gave it 126.x. To protect the sensitive information on both LAN's we put in a firewall between the two (which is also in NAT mode). A Sonicwall SOHO3 to be exact.

Now, we have had some requests for vendors to have VPN access to the 126.x network. We currently provide VPN access to the 127.x network but I would like to pass the tunnel right to the 126.x network rather than one to one NAT on the 127.x side (we are desperately thin for available ip's). My efforts so far have failed and it's all I can do to try to get the approval to expand the class.

Any thoughts or ideas?

Thanks,
John Axsom

 

[freakyone]

Unless there is more to this than I know about I would set things up as follows:

Add a static route in the Sonicwall Pro 300* that will direct traffic looking for the 126.x network to the WAN IP of the Sonicwall SOHO3*. Then set up the proper allowances in SOHO3 to forward the traffic as needed

*Assuming both firewalls are set to allow VPN traffic pass through them.

Based on what you stated, VPN traffic can pass through the Pro 300. If you have tried the above layout w/no resolution I would double check allowances of the SOHO3.

~Dave~
Where do packets go when they die ?