Re: VPN IP address issue

Hi,

moncho wrote:
> I am just wondering why two nic's would not work?

The approach you suggest may be feasible if you only need the VPN tunnel for
exclusive communication between two servers. In that case, you probably
don't even need a second physical NIC -- you only need two addresses from a
different block, for the two tunnel endpoints. Each side can address the
other using opposite tunnel endpoint.

However, if you want to fully connect the two networks, where any machine on
either network could potentially talk to any machine on its local or remote
networks, you will have a routing problem. What you would normally do is
create a routing table entry designating the remote tunnel endpoint as the
gateway for packets destined to the remote network. Unfortunately, if the
remote network is the same as the local network, this is obviously not going
to work.

Certain esoteric designs, like many-to-many NAT on both ends of the tunnel,
theorethically could help, but that would be a lot more complicated than
renumbering and may not be possible on what you have available to work with.


--
Chris Priede


.

Relevant Pages

  • Re: VPN and Fedora server/Win client?
    ... > I'm not even sure if what we want to do, VPN can allow. ... VPN is a method to extend a private network by actually transporting ... the tunnel, two at each end, one for the private network ...
    (comp.os.linux.misc)
  • Re: VPN and Fedora server/Win client?
    ... > I'm not even sure if what we want to do, VPN can allow. ... VPN is a method to extend a private network by actually transporting ... the tunnel, two at each end, one for the private network ...
    (comp.os.linux.security)
  • Re: IPv6 Woes...
    ... to ping across the tunnel, and to the internet just fine. ... My setup works fine if I ping the network address of my v6 router ... therefore ethernet bridging is not relevant ...
    (freebsd-net)
  • Re: OpenSwan - Linux VPN to Linux VPN
    ... I want to be able to use all the resources on the host network. ... I can get some of it to work changing the routes manually. ... There are 4 IP addresses associated with a VPN tunnel: ... The left router knows that the packet in destined via the tunnel, ...
    (comp.os.linux.networking)
  • Re: [fw-wiz] IPv6 and IPSec
    ... >> Now, as a system administrator, how are you going to track down a virus ... network to network). ... Nice thing is that, with IPv6, you can have ... up an IPv6 tunnel back out that slid right past all the IDS they had. ...
    (Firewall-Wizards)