IPSec Site to Site VPN - Connection between Clients without default gateway
Hi,
I think I've seen a similar configuration like what I want to reproduce. But I unfortunately cannot.
Following Problem:
I've got two Zyxel USG. An USG60 in our headquarter and an USG20-VPN in one of our branches. Between this two Gateways a VPN tunnel is established:
Headquarter:
LAN IP USG: 192.168.10.254
Devices IPs: 192.168.10.200 - 192.168.10.225
Branch:
LAN IP USG: 192.168.13.254
Devices IPs: 192.168.10.127 - 192.168.10.130
The VPN tunnel between the USGs is working fine, but now here come the difficulties:
In the headquarter there are devices in the subnet 192.168.10.0/24 which are supported by an external company and where i can't set a default gateway.
These devices should communicate with 4 devices with an IP range from 192.168.10.127 to 192.168.10.130 installed in the branch. On these 4 devices I also can't set a default gateway.
I thought it could somehow be possible to connect the devices in the headquarter with the devices in the branch by setting routing policies and / or SNAT and without setting default gateway on den devices itself.
But I'm not sure if this even can work!?
I think I've seen a similar configuration like what I want to reproduce. But I unfortunately cannot.
Following Problem:
I've got two Zyxel USG. An USG60 in our headquarter and an USG20-VPN in one of our branches. Between this two Gateways a VPN tunnel is established:
Headquarter:
LAN IP USG: 192.168.10.254
Devices IPs: 192.168.10.200 - 192.168.10.225
Branch:
LAN IP USG: 192.168.13.254
Devices IPs: 192.168.10.127 - 192.168.10.130
The VPN tunnel between the USGs is working fine, but now here come the difficulties:
In the headquarter there are devices in the subnet 192.168.10.0/24 which are supported by an external company and where i can't set a default gateway.
These devices should communicate with 4 devices with an IP range from 192.168.10.127 to 192.168.10.130 installed in the branch. On these 4 devices I also can't set a default gateway.
I thought it could somehow be possible to connect the devices in the headquarter with the devices in the branch by setting routing policies and / or SNAT and without setting default gateway on den devices itself.
But I'm not sure if this even can work!?
0
Accepted Solution
-
Hi @pit
If device without default gateway, the traffic unable reach to other broadcast subnet.
It means all of routing scenario is unable realize including VPN.
BTW, why devices IP subnet is not the same as LAN(192.168.13.0/24)?
Share yours now!
Stanley
5
All Replies
-
Hi @pit
If device without default gateway, the traffic unable reach to other broadcast subnet.
It means all of routing scenario is unable realize including VPN.
BTW, why devices IP subnet is not the same as LAN(192.168.13.0/24)?
Share yours now!
Stanley
5 -
It was planned, that the devices in the branch will be in the subnet 192.168.13.0/24. But as mentioned before the devices are supported by an external company and the technician installed the devices in the branch during my holidays with ether not knowing that a VPN tunnel is established between headquarters and branch (maybe he thought there is a wifi connection) or not knowing how the tunnel is configured.
Now I have the problem that the devices are "worthless" at the moment. So I thought that it may be possible to connect the devices without giving them a default gateway.
But if it's not possible I will get the devices configuration changed.
Thank you for your help!
PS: I've posted the question into the wrong category. Could you move it to USG Series?0
Categories
- All Categories
- 414 Beta Program
- 2.2K Nebula
- 130 Nebula Ideas
- 90 Nebula Status and Incidents
- 5.4K Security
- 171 USG FLEX H Series
- 255 Security Ideas
- 1.4K Switch
- 71 Switch Ideas
- 1K Wireless
- 36 Wireless Ideas
- 6.2K Consumer Product
- 235 Service & License
- 370 News and Release
- 77 Security Advisories
- 24 Education Center
- 5 [Campaign] Zyxel Network Detective
- 2.9K FAQ
- 34 Documents
- 34 Nebula Monthly Express
- 80 About Community
- 69 Security Highlight