Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Access to remote site (site-site VPN) with VPN client

    IPsec
    3
    7
    2.9k
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • J
      jai23155
      last edited by

      All, I have been using 2.0.1 at main site UK and linksys RVS4000 on branch office in USA. there is site-to-site VPN implemented between both. I use shrew soft client to connect to the UK site. Is there way to browse USA network once i am connected to UK main site through Shrew client. i can browse it from LAN without any issues. what are settings i should be looking at? Thanks in advance.

      1 Reply Last reply Reply Quote 0
      • S
        SeventhSon
        last edited by

        if both UK and USA subnets are within the same supernet: increasing the Phase 2 Local Network setting to encompass both networks (and the corresponding "Remote" change on the client)

        1 Reply Last reply Reply Quote 0
        • J
          jai23155
          last edited by

          could you be more specific please..

          1 Reply Last reply Reply Quote 0
          • S
            SeventhSon
            last edited by

            say, you have USA 192.168.0.0/24 and UK 192.168.1.0/24, you can make the Phase 2 Local Network setting 192.168.0.0/23.

            1 Reply Last reply Reply Quote 0
            • J
              jai23155
              last edited by

              tried that with no luck. any more ideas?? cheers

              1 Reply Last reply Reply Quote 0
              • B
                bencummins
                last edited by

                Hi

                On the mobile clients set up, you would need to add a phase two for the US subnet

                And then on the config for the US office from the UK Server, you would need to either broaden the mask if they subnets are similar, or add a seperate phase two for the range you assign to the mobile clients as the local network, and the US ip as the remote network.

                If you can give more info about what ip ranges are specified where, I can give you a more detailed setup.

                Ben

                1 Reply Last reply Reply Quote 0
                • J
                  jai23155
                  last edited by

                  Ben, US network - 192.168.11.0/24
                  UK network - 192.168.10.0/24
                  have tried setting network address to 192.168.10.0/23 for phase 2 which didnot work.
                  thanks

                  1 Reply Last reply Reply Quote 0
                  • First post
                    Last post
                  Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.