vpn gateway question

2006-06-21 Thread Frans Haarman
I have a quick question.

I want to try to setup a vpn gateway. It would need vpn connections with
several clients (using the same subnets!!). I want to somehow map
each vpn connection to another IP range, so we can contact all networks at
the same time.

I think I can accomplish this using NAT or bidirectional mappings ?

I do not know however if its possible to create several vpn connections
which have the same network on the otherside. Is this possible ?! Most
clients use 192.168.1.x. For each client I want to define a 10.1.1.x and map
all addresses to the 192.168.1.x range of that client.

Somthing like:

10.1.1.x  192.168.1.x
10.2.2.x  192.168.1.x
10.3.3.x  192.168.1.x

But it looks like this would mess up routing tables. How would you do this
?! Is it even possible  ?

Regards,

Frans



Re: vpn gateway question

2006-06-21 Thread Dag Richards

Frans Haarman wrote:

I have a quick question.

I want to try to setup a vpn gateway. It would need vpn connections with
several clients (using the same subnets!!). I want to somehow map
each vpn connection to another IP range, so we can contact all networks at
the same time.

I think I can accomplish this using NAT or bidirectional mappings ?

I do not know however if its possible to create several vpn connections
which have the same network on the otherside. Is this possible ?! Most
clients use 192.168.1.x. For each client I want to define a 10.1.1.x and map
all addresses to the 192.168.1.x range of that client.

Somthing like:

10.1.1.x  192.168.1.x
10.2.2.x  192.168.1.x
10.3.3.x  192.168.1.x

But it looks like this would mess up routing tables. How would you do this
?! Is it even possible  ?

Regards,

Frans



I would think that the simplest way to do this would be to do a NAT on 
each of the remote GW devices.  So your central device _has_ a vpn to 
three unique subnets.  Otherwise I think you are in for some really ugly 
kludges.