› Forums › Network Management › ZeroShell › VPN LAN-LAN HELP!!!!!
- This topic is empty.
-
AuthorPosts
-
July 14, 2010 at 7:14 am #42509
obc88
MemberHi to all,
Im trying to Connect 2side using LAN-TO-LAN VPN connection.
I saw that the both side connected but cant ping each other, anything i need to do on this configuration or rules need to add??SIDE A (server using Pre-Shared Key )
eth00 : 10.0.9.254
eth01 : WAN connected to internetSIDE B (Client using same Pre-Shared Key as server )
eth00 : 10.0.10.254
eth01 : WAN connected to internetboth side VPN00 show connected to each other but still can ping to each other network.
Thanks to your opinion n idea.
Regard
OBCJuly 16, 2010 at 1:26 pm #50718ppalias
MemberYou need to add a static route for 10.0.10.X to side A with gateway the VPN side of side B and vice versa for the other side.
July 19, 2010 at 2:46 am #50719obc88
MemberThanks For Reply.
I done it, & can ping each other network already, but the problem now is i cant see game for each other network.
Mean if i create game at side A (DOTA), side B cant see my game at all.
I tried use PFsense to do VPN through IPsec, also the same problem happened.
Zeroshell have any way to allow UDP broadcast forwarding???
(as i know DOTA-warcraftIII need to use UDP broadcast)Thank again for your attention^^
Regared
OBCJuly 19, 2010 at 11:21 am #50720ppalias
MemberIf you want to pass the broadcast packets, you will also have to bridge the lan of one side with the tunnel interface and migrate both LANs in the same IP subnet.
July 21, 2010 at 3:49 am #50721obc88
MemberHi ppalias,
are you mean the server side need to do a bridge interface? or the both side?? now im using 10.0.0.0/24 subnet, is it possible to LAN up to 100places of using same VPN tunnel??
you will also have to bridge the lan of one side with the tunnel interface and migrate both LANs in the same IP subnet.
IM confusing that what u meaning. Any tutorial or can guide me how to do that???
Thanks for your reply again^^
Regard
OBCJuly 21, 2010 at 10:07 am #50722ppalias
MemberIt will have to be done on both sides. Create a bridge interface and bridge the tunnel and the LAN. When you do it on both sides the LANs and the tunnel will all be in the same LAN. In order for this to work they will have to be in the same IP subnet, so you will have to migrate the stations of one end to the IP subnet of the other end.
July 22, 2010 at 9:44 am #50723obc88
MemberTo ppalias,
I done it, im created bridge for both side ( ZS LAN + VPN00 )
It connected pretty well & can play game 2gether without laggy or delay.The ZS A is connected to ZS B, now i wanted to build one more ( ZS C ), i tried use the same way mean using same Preshared Key as ZS A & ZS B, but cant connect to the ZS A at all.
Is it not allowed to add more Client to the Server? It just allow for one client??
Thanks a lot for you helpfull comment..
Regard
OBCJuly 22, 2010 at 9:52 am #50724ppalias
MemberYes LAN to LAN is for one client only. You have to create a new VPN server for ZS C.
July 23, 2010 at 2:54 am #50725obc88
Memberto ppalias
I add 1 more VPN server ( VPN01) at side A. side C i assign as client. Im using the LAN-TO-LAN connected oso. No any else easiest way to add more client? Mean i want add up to 10 client. ( side D, E, F, G, H, I…… )It only the same way i can use?? Thanks you.
Regard
OBCJuly 23, 2010 at 9:58 am #50726ppalias
MemberIf you want to have them in the same LAN I’m afraid this is the only way I know.
July 26, 2010 at 4:37 pm #50727obc88
Memberthanks for ur reply.
1more question.
is it possible to LAN together in same subnet?
mean SIDE C & SIDE D using 10.0.8.0/24. using same group at both side or more than 2 sides will crash??And how to make port forwarding for VNCviewer? setting in the firewall?
Hopefully zeroshell can make it as powerfull & universal router^^
Thanks for your guide again^^Regard
OBCJuly 26, 2010 at 10:00 pm #50728ppalias
MemberNo it won’t crash, just don’t use the same IPs twice in the sites as this will cause IP conflict.
You can do port forward in ROUTER -> Virtual Server.August 5, 2010 at 8:00 am #50729obc88
MemberHi, pplias
sorry for the late reply..
Im glade that ZS is support in USB. Mean i using USB drive to replace HDD.But openvpn can do that using same IP in both side, it no IP conflict happen also. Any ways to do this with using LAN-TO-LAN vpn??
Im curious that have some of the small programmed install in ZS and can make this IP conflict won’t happen by using the SAME IP at both side.Bonding minimum requirement is need FIX ip??
regard
OBCAugust 5, 2010 at 10:20 am #50730ppalias
Memberopenvpn is just establishing a tunnel between 2 sites. If you bridge the tunnel interface and the LAN interface on both sites then you will have a big LAN. As in every LAN you should not use the same IP twice.
August 6, 2010 at 2:55 am #50731obc88
MemberTo ppalias
Thanks for reply
have any other ways to do with using same IP at both side. but no IP conflict happen, can make it?wish you can slove my problem, thanks for everything^^
Regard
OBC -
AuthorPosts
- You must be logged in to reply to this topic.