Extending LAN Subnet Between 2 Datacenters?

[mevans336]

Can anyone point me to the recommended method for extending a LAN subnet between two datacenters so they can share the same private IP address space on the LAN side of the pfSense?

Example:

192.168.1.1 LAN <–-> WAN <------> Public Internet <------> WAN <---> LAN 192.168.1.1

[jasonlitka]

OpenVPN tap connection.  I'd try and do without it if you could though.  Why do you need the same network on each side?

[mevans336]

@Jason:

OpenVPN tap connection.  I'd try and do without it if you could though.  Why do you need the same network on each side?

We're using Hyper-V replication to replicate a bunch of VMs. It will be much more seamless if I can just power them on without altering IPs and so forth.

Does tap bridging work with 2.1? I thought 2.0 or 2.1 broke it?

[Derelict]

I take it a nice layer 2 metro-e between the two is not an option?

[mevans336]

@Derelict:

I take it a nice layer 2 metro-e between the two is not an option?

That would make my life so much easier, but is not in the budget … yet.

[kejianshi]

Have you considered a full mesh network VPN?

[mevans336]

@kejianshi:

Have you considered a full mesh network VPN?

I'm not sure what that is and what I found on Google isn't much help. Can you elaborate?

[kejianshi]

I was talking about the TINC package.

[mevans336]

@kejianshi:

I was talking about the TINC package.

That is very, very cool. I've added it to my list to try as the first solution.

EDIT:

Wow, that was super easy and works very well. I think I'm going to use it.

[kejianshi]

Yep - Its pretty cool for what you need.

There is another guy who is trying to get 3 or 4 separate sites communicating well - For him, this is probably also the best / easiest option.

But easy is relative - Maybe he will see your post and ask your instruction.