Setup Site to Site VPN in complicated layout
Posted: Mon Jan 18, 2021 8:04 am
I'm having problems setting up a Site to Site VPN in a rather complicated environment.
There are two networks in two locations, on of them has a softether VPN server running on 192.168.222.101/24, and the other one has a bridge running on 192.168.0.50/24. Now this initially it looks like a simple Layer3 switch would do the trick, but the problem is that there also is a Subnet 192.168.0.0/24 on the network the VPN server is running on, so adding the route from the server network to the bridge network to the static routing table isn't possible as it would cause that subnet to be unavailable from the server subnet. Now simply enabling SecureNAT works one way when a computer on the bridge network is initiating the connection, but a two way communication is required.
There are two networks in two locations, on of them has a softether VPN server running on 192.168.222.101/24, and the other one has a bridge running on 192.168.0.50/24. Now this initially it looks like a simple Layer3 switch would do the trick, but the problem is that there also is a Subnet 192.168.0.0/24 on the network the VPN server is running on, so adding the route from the server network to the bridge network to the static routing table isn't possible as it would cause that subnet to be unavailable from the server subnet. Now simply enabling SecureNAT works one way when a computer on the bridge network is initiating the connection, but a two way communication is required.