Network setup - (NAT Thing)

AndersHH

Who should I contact, or what should I do, if I want the following setup:
http://www.gliffy.com/publish/1052614/L
Each router have a public IP, and I want to connect from every city to city 1 (Head office) - but i don't want to connect from e.g. 2 to 3
Example IP's:


City 1
Public IP (example): 100.100.100.101
Router: 10.1.0.1
Server: 10.1.0.2
Clients: 10.1.1.10 - 10.1.1.254

City 2
Public IP (example): 100.100.100.102
Router: 10.2.0.1
Server: 10.2.0.2
Clients: 10.2.1.10 - 10.2.1.254

City 3
Public IP (example): 100.100.100.103
Router: 10.3.0.1
Server: 10.3.0.2
Clients: 10.3.1.10 - 10.3.1.254

City 4
Public IP (example): 100.100.100.104
Router: 10.4.0.1
Server: 10.4.0.2
Clients: 10.4.1.10 - 10.4.1.254

Hope you have an answer

–------------------
Anders Hansen

sullrich

Not sure what you mean by who should you contact?

Your looking for paid support? If so you may want to post a bounty. Otherwise you need to spell out your problems here if you want free support.

AndersHH

It was, if I should contact my ISP to make a solution, or if it is possible using pfSense as router/firewall ;)

–--------------------------
Anders Hansen

sullrich

By what little you have showed I don't see any reasons why pfSense would not work for what your looking for.

Give it a shot.

AndersHH

The point is: How to make it possible with the 10.x network - over the net (some kind of VPN ???)

If I should use some kind of NAT or what ???

–----------------
Anders Hansen

sullrich

Yes, you would use NAT.

AndersHH

How do i make a mapping like:


100.100.100.1 => Maps to 10.1.0.1
100.100.100.2 => 10.2.0.1
100.100.100.3 => 10.3.0.1
100.100.100.4 => 10.4.0.1

???
–----------------
Anders Hansen

sullrich

Firewall -> NAT -> Advanced Outbound NAT

AndersHH

Made a Virtual IP for 100.100.100.2:

If I should ping 10.2.0.1 with this rule, would it ping 100.100.100.2?

–---------------
Anders Hansen

ipsetup.GIF_thumb

hoba

You are most likely talking about a VPN setup here. You need 3 tunnels to get this working. It's pretty easy. As the tunnel definitions only will match

City1 <-> City2
City1 <-> City3
City1 <-> City4

there won't pass any traffic between city2, city3 or city4 whereas everybody can connect to citiy 1 and city1 can connect to all other cities.

See http://doc.m0n0.ch/handbook/ipsec.html for how to configure this. It's exactly the same for pfSense.