Connect to and use 2nd network via VPN

ubernoob007

Reputable
Jul 15, 2015
2
0
4,510
Ok I'll try and explain my "ask" simply!

I have two separate locations that each have their own fibre broadband service and both have static IPs, let's say location A and location B. From location B I want devices on its LAN to think they are at location A and I want to be able to access devices at location A (eg. printer, CCTV etc).

At location A I have an Asus RT-N66U router which is used to connect the Internet (via a fibre modem). On the RT-N66U I have configured the VPN access (which I can connect to and access from my laptop at location B).

However I can't setup a VPN connection from some of my devices at location B (eg. Xbox / TV / Sonos etc). My question is, how can I get the devices on my LAN at location B connecting to the LAN at location A?

I have purchased a Cisco VPN firewall for location B (Cisco Part No. RV110W). Is it as simple as configuring a Site to Site VPN on this firewall, pointing it at the static IP at location A (and using the VPN account setup on the Asus RT-N66U) - and then connecting devices at location B to the Cisco firewall?

Hopefully my question is relatively clear! Cheers
 
Solution
Yes you can configure cisco firewall to do site-to-site vpn: http://www.cisco.com/c/dam/en/us/td/docs/routers/csbr/rv110w/administration/guide/rv110w_admin.pdf

Also you will need both locations to be on different IP subnets (they can both be 255.255.255.0, but if one is 192.168.1.x then the other has to be different).

On the client VPN router you will want to disable "Use default gateway on remote network". Otherwise all of your internet traffic for the client location will be ran through the VPN tunnel and will be limited to the upload bandwidth of the host side.
Yes you can configure cisco firewall to do site-to-site vpn: http://www.cisco.com/c/dam/en/us/td/docs/routers/csbr/rv110w/administration/guide/rv110w_admin.pdf

Also you will need both locations to be on different IP subnets (they can both be 255.255.255.0, but if one is 192.168.1.x then the other has to be different).

On the client VPN router you will want to disable "Use default gateway on remote network". Otherwise all of your internet traffic for the client location will be ran through the VPN tunnel and will be limited to the upload bandwidth of the host side.
 
Solution

gbb0330

Reputable
Apr 28, 2015
1,498
0
5,960


for best results, when it comes to site to site VPNs always use 2 identical devices. I would get another cisco VPN firewall for location A.
 

ubernoob007

Reputable
Jul 15, 2015
2
0
4,510
Thanks for everyone's comments.

I've actually purchased another Cisco RV110W and have set them both up at the two locations. I have managed to setup an IPSec connection between them, this shows as active in the routers status plus I can connect to devices at my remote site by using their 192.168.x.x IP addresses (eg logging onto a CCTV camera). However my internet traffic is still breaking out from the local site (eg. when I got to a web browser and query my WAN IP it comes up with the client's WAN IP address). This causes a problem for my use case, as I want my set top box to route its internet traffic from the remote site to the main site.

Any suggestion on where I might be going wrong? Ideally I'd want to specific IP addresses on the client network and force their internet traffic via the second site.

Thanks - Adrian
 

gbb0330

Reputable
Apr 28, 2015
1,498
0
5,960


configure client network devices to use gateway at 2nd site.