IPSecSite2SiteVPN



  • Hello All, looking for some help here. I have a VPN setup between my office and my house, I can create a connection no problem, but the problem is I cant access everything at work from my house. Here's my network layout.
    Office, I have network 192.168.100.1
    Home, I have Network 192.168.1.1

    Office Internet uplink to Cisco Switch, Switch to Netscreen firewall WAN , switch to another HP Switch(Layer 3), Switch to PfSense WAN

    HP Switch to PfSense(NAT) LAN 192.168.100.251, Hp Switch to Netscreen Firewall(NAT) Lan 192.168.100.1, HP Switch to Server A (uses 192.168.100.1 as Gateway), Server B (uses 192.168.100.1 as Gateway), Server C (uses 192.168.100.251 as Gateway) There is no DHCP server on any of this LAN

    Home- I use a Sonicwall TZ105 for my VPN connection., Internet goes into Sonicwall and Lan comes out. DHCP done by Server in LAN.

    So when I connect to my office from home with my VPN (Sonicwall to PfSense) I can access Server C which uses the PfSense as its Gateway, but I cant access anything else on the 192.168.100. Network

    The ultimate goal is to get rid of the OLD Netscreen Firewall, but before I do so I need to find out everything that is on the 192.168.100 Network. I want to slowly move devices from Netscreen to PfSense. In the mean time I want to be able to access everything from my house over the VPN.

    I understand that there is two NAT devices so when I type 192.168.100.70(server A) it dies because it doesn't know what geteway 192.168.100.70 belongs to.
    I've read about Nat over VPN, but i'm not sure that's what I need. some how I need to tell the PfSense that if it doesn't find the device in its table to look at the Netscreen Table..

    Feel Free to Email me at halter_joel@hotmail.com



  • Office Internet uplink to Cisco Switch, Switch to Netscreen firewall WAN , switch to another HP Switch(Layer 3), Switch to PfSense WAN

    In some cases a small network draw would be nice to understand it really like you mean it.


Log in to reply