VPN between 2 Firewalla Gold routers on different ISP

Follow

Maintenance

• February 24, 2023 17:45

We have two buildings. Each has its own ISP and Firewalla Gold router.

Building A internal addresses are 192.168.1.x
Building B internal addresses are 192.168.3.x

All other internal network devices are just switches and hubs.

How can we VPN the two buildings together so the both can internally communicate with each other, keep the subnets and stop DHCP traffic between the subnets?

0

• 

  Bob O'Hara

  • February 24, 2023 18:43

  You should be able to enable the vpn server on one of the FWGs and the vpn client on the other FWG. For the details look at this article: https://help.firewalla.com/hc/en-us/articles/5515850433683-Firewalla-Site-to-Site-VPN

  0

  Comment actions Permalink
• 

  Maintenance

  • February 27, 2023 14:06

  
  Should it be like this?

  Building A
  192.168.1.X
  255.255.255.0

  Building B
  192.186.3.x
  255.255.255.0

   

  Or different?
  Building A
  192.168.1.X
  255.255.252.0

  Building B
  192.186.3.x
  255.255.252.0

  0

  Comment actions Permalink
• 

  Firewalla

  • February 27, 2023 17:03

  192.168.1.x is a /24 network so 255.255.255.0 is the best one to use

  0

  Comment actions Permalink
• 

  Maintenance

  • February 27, 2023 18:09

  do you mean to put both buildings on 192.168.1.x ?
  each building has its own ISP and over 100 devices and both have DHCP for wifi devices... We need the buildings to share devices with each other.

   

  0

  Comment actions Permalink
• 

  Maintenance

  • March 02, 2023 19:27

  ????

  0

  Comment actions Permalink
• 

  Bob O'Hara

  • March 02, 2023 20:06

  No, I think they were pointing out that your subnet masks were not correct. The subnet 192.168.1.x is a subnet with 256 IP addresses. The correct subnet mask for it is 255.255.255.0, or the equivalent CIDR spec of 192.168.1.0/24. The mask in your post here, 255.255.255.252 is not correct.

  0

  Comment actions Permalink
• 

  Maintenance

  • March 02, 2023 20:57

   

  Looking in the upper area posts, my posts show 255.255.252.0 not 255.255.255.252
  
  If I understand, when it is 255.255.255.0 then there are only 254 addresses for two different networks
  
  whereas 255.255.252.0 there are 1,024 addresses and in this way each Router could have a different DHCP address zone and there wall be a lower address limit and no crossover.

   

  0

  Comment actions Permalink
• 

  Maintenance

  • March 06, 2023 13:39

  currently the two Firewalla Gold routers are VPN together.... "A" is the server and "B" is a client.

  Building A
  192.168.1.X
  255.255.252.0

  Building B
  192.186.3.x
  255.255.252.0

  They are connected yet a PC in "B" can't even ping the "A" router.
  
  What is missing?

   

  0

  Comment actions Permalink
• 

  Firewalla

  • March 06, 2023 16:49

  You may need to allow B's subnet on A's network. (insert allow rule on A)

  See this article https://help.firewalla.com/hc/en-us/articles/5515850433683-Firewalla-Site-to-Site-VPN

   

  0

  Comment actions Permalink

Please sign in to leave a comment.