VPN Behind NAT??

Forums › LAN (ethernet/Wifi/routers/Bluetooth) › VPN Behind NAT??

astrae

268 posts

Ultimate Geek

#110444 9-Oct-2012 15:36

Hi

I use to use a Cisco SRP527w as my adsl router. I've now moved to orcon genius and I'm having to use their router.

The one thing I miss with the Cisco router is the built in VPN server.

Is there any way I can still use this plugged into my lan?

If I try to connect to it using the VPN client on my LAN I get no response. I presume this is because the request isn't arriving on the correct interface on the router (formally the adsl connection on that router)

The VPN is IPsec, i've tried forwarding ports on the Orcon router to it but get no response.

There is a part on the Orcon router about not using NAT on specific triggers and ports but I couldn't fully understand it. (sorry I'm not at home to look at the router right now to explain what exactly it is)

If anyone has any Idea on how to set this up it would be muchly appreciated.

cheers

DrStrangelove

368 posts

Ultimate Geek

#698786 9-Oct-2012 22:53

Speaking generally, yes it'll work ..._IF_ you have a WAN port on the Cisco ADSL router.

Alot of the gimp'd Linksys modems have an Ethernet port that can be set up as a WAN port and then you just need to set the Cisco modems WAN interface as the default gateway.

Then you can just portforward the DDNS VPN access point through the orcon (which is genius I here) box to your Cisco.

This may create some interesting LAN issues though as most of these low end devices don't have VLANs or port trunking.

astrae

268 posts

Ultimate Geek

#698964 10-Oct-2012 11:09

DrStrangelove: Speaking generally, yes it'll work ..._IF_ you have a WAN port on the Cisco ADSL router.

Alot of the gimp'd Linksys modems have an Ethernet port that can be set up as a WAN port and then you just need to set the Cisco modems WAN interface as the default gateway.

Then you can just portforward the DDNS VPN access point through the orcon (which is genius I here) box to your Cisco.

This may create some interesting LAN issues though as most of these low end devices don't have VLANs or port trunking.

Thanks for the reply,

It does have a WAN port but I'm not sure what I need to do.

These routers are Cisco Routers not a Linksys.

I've got a full admin manual, I'll have a read and see if I can understand it.

The orcon router does have more options then I thought it would.

DrStrangelove

368 posts

Ultimate Geek

#699606 11-Oct-2012 11:52

Cisco IOS is the least of your worries(if its cmd line and not menu)

Are you going to connect devices onto the Cisco router LAN?
What is being serviced by the VPN(ipSec)?

If you have devices on the Cisco LAN(Ethernet), will these devices be required to be accessible from the Orcon LAN(Ethernet)?

Does the Orcon modem have any routing(static, dynamic), VLAN, 802.1q(Yer like I wish)

If we know the strengths of the Orcon modem we may be able to find a best fit to provide a solution.

But at the end of the day I'd say you're pretty much stuffed after reading this.

http://www.geekzone.co.nz/forums.asp?forumid=82&topicid=108833 :-(

astrae

268 posts

Ultimate Geek

#701383 15-Oct-2012 11:57

I've got it working.

Found the setting to disable the DSL interface on the cisco Router.

Connected the Orcon router to the Ciscos WAN port. Setup the ciscos WAN interface with a fixed internal IP pointing the gateway and DNS at the orcons router IP.

I enabled DMZ on the Orcon router to the WAN IP on cisco. This gives the cisco router open access the internet. Left firewall and NAT on on the Cisco router.

I can now connect the to the CISCO VPN.

I was going to connect all my other LAN devices to the cisco router and use this as the gateway. But in testing, while on VPN I can still access the LAN devices connected to the orcon router.

The orcon router is still acting as a router for my lan devices and is still running NAT, Firewall.

DrStrangelove

368 posts

Ultimate Geek

#701667 15-Oct-2012 18:05

Top man (assumption). You just won Networker of the hour. :-)