VPN Connection

[gekohat]

Hi all, have read through the forum and countless Google searches, have found guides to setting the 7800N up for VPN but I need to know if I have a VPN service (private internet access) can I make the 7800N connect to the VPN and send/receive all traffic from it? Basically will anything I connect to the router be using the VPN connection?

Cheers Mitch

[billion_fan]

Once the router connects to a VPN server you will have access to everything behind the VPN servers example Computers >> 7800N >> Internet >> Router (not important) >> VPN server >> Computers.

The VPN client on the 7800N will not route the traffic through the VPN tunnel. (no option to route traffic through the VPN tunnel)

So the 7800N should create a TCP/IP connection from one network to the other.

[lcarley]

Hi

I dont get this!

I created a LAN-to-LAN VPN on the Billion to a VPN provider (VPNUK.NET) so that I can use a VPN server in the US to fool Geo-IP.
The VPN comes up fine. The gateway on the remote network is 192.168.100.1
I then add 2 static routes for the to the IP address of http://www.whatismyipaddress.com side as follows:-
- route add 66.80.82.69 255.255.255.255 192.168.100.1
- route add 67.203.139.148 255.255.255.255 192.168.100.1
I dont need to tell it the interface, and route show verifies that these addresses will be routed to use gateway 192.168.100.1 over inteface pppv4.
To test, I then use traceroute, from the Billion to the addresses above and they show that the billion is routing traffic, to the http://www.whatismyipaddress.com addresses over the VPN. As traceroute works, I can see that there is a route back too.

So, I am happy that all is well.... but.. it doesnt work from a PC connected to my internal network. When I say doesnt work, I get no ping response at all. So it is obviously aware of the routing table update, but something is not working.

I cant do a snoop from the billion, so I am a bit stuck.

My theory is that traffic is not coming back, but is being routed out. And again, as I cant do a snoop I cant see the source address on the packets going down the VPN.

I post here because of the statement The VPN client on the 7800N will not route the traffic through the VPN tunnel. (no option to route traffic through the VPN tunnel)
Is there something that I dont know which makes my efforts futile?

Or, is there a way to run a snoop (tcpdump or similar) on the Billion console?

Thanks in advance for any insights!

[billion_fan]

Have a look at this thread

viewtopic.php?f=9&t=490

[lcarley]

Looked at the link - doesnt seem relevant to me. His problem was with incorrect route statements.
I think my statements are correct...

- route add 66.80.82.69 255.255.255.255 192.168.100.1 (send traffic destined for the address 66.80.82.69/32 - I that address only - to the gateway 192.168.100.1 (that is the addresss at the other end of the VPN)

Or did I make a mistake?

[billion_fan]

Looked at the link - doesnt seem relevant to me. His problem was with incorrect route statements.
I think my statements are correct...

- route add 66.80.82.69 255.255.255.255 192.168.100.1 (send traffic destined for the address 66.80.82.69/32 - I that address only - to the gateway 192.168.100.1 (that is the addresss at the other end of the VPN)

Or did I make a mistake?

The link provided is example setup for setting up the static route option via the web gui, not via telnet or CLI (Billion support do not cover telnet commands)

[lcarley]

Hi, OK - I see.

When I do it the same thing through the GUI, I get the same result. I was showing the command line stuff to illustrate what I was doing.

So, what does anyone think? Does anyone know of a reason why I should be able to router through the VPN from the router itself, but not from a PC connected to the router?

Thanks in advance