Re: [pfSense] Site to Site VPN behind nat

2016-05-02 Thread Karl Fife



On 5/2/2016 10:24 AM, Vick Khera wrote:

On Sun, May 1, 2016 at 8:18 PM, Dane Reugger  wrote:


I've seen this done with Aruba but not sure it's possible with PfSense but
if it is I would love a guide to get it going.


Use OpenVPN. It doesn't care at all about the NAT. Many guides online for
setting up whole network VPN over OpenVPN.

On pfSense server, you create one "server" entry per remote LAN you want on
its own dedicated port. Open up the firewall to allow connections and
you're good to go.
___
pfSense mailing list
https://lists.pfsense.org/mailman/listinfo/list
Support the project with Gold! https://pfsense.org/gold


...Unless of course both sides are behind NAT.  One side must public, or 
at least have a port forward from the public interface.

___
pfSense mailing list
https://lists.pfsense.org/mailman/listinfo/list
Support the project with Gold! https://pfsense.org/gold


Re: [pfSense] Site to Site VPN behind nat

2016-05-02 Thread Vick Khera
On Sun, May 1, 2016 at 8:18 PM, Dane Reugger  wrote:

> I've seen this done with Aruba but not sure it's possible with PfSense but
> if it is I would love a guide to get it going.
>

Use OpenVPN. It doesn't care at all about the NAT. Many guides online for
setting up whole network VPN over OpenVPN.

On pfSense server, you create one "server" entry per remote LAN you want on
its own dedicated port. Open up the firewall to allow connections and
you're good to go.
___
pfSense mailing list
https://lists.pfsense.org/mailman/listinfo/list
Support the project with Gold! https://pfsense.org/gold


Re: [pfSense] Site to Site VPN behind nat

2016-05-01 Thread Kevin Tollison
Buy the Gold membership. The pfSense book has a ton of VPN setup docs.

Kevin

On Sun, May 1, 2016 at 8:18 PM Dane Reugger  wrote:

> I'm looking for some docs or a walk through on creating a site to site VPN
> that will work with the client the client behind NAT. Ideally we could plug
> in behind another router and have it dial in and create the tunnel?
>
> I've seen this done with Aruba but not sure it's possible with PfSense but
> if it is I would love a guide to get it going.
>
> Thanks,
> -Dane
> ___
> pfSense mailing list
> https://lists.pfsense.org/mailman/listinfo/list
> Support the project with Gold! https://pfsense.org/gold
>
___
pfSense mailing list
https://lists.pfsense.org/mailman/listinfo/list
Support the project with Gold! https://pfsense.org/gold


[pfSense] Site to Site VPN behind nat

2016-05-01 Thread Dane Reugger
I'm looking for some docs or a walk through on creating a site to site VPN
that will work with the client the client behind NAT. Ideally we could plug
in behind another router and have it dial in and create the tunnel?

I've seen this done with Aruba but not sure it's possible with PfSense but
if it is I would love a guide to get it going.

Thanks,
-Dane
___
pfSense mailing list
https://lists.pfsense.org/mailman/listinfo/list
Support the project with Gold! https://pfsense.org/gold