NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.

Forum Discussion

reliablesupport's avatar
reliablesupport
Aspirant
Jun 08, 2021

connecting site to site VPN with 2 x FVS336gV3 routers where 1 FVS336 is behind a NAT modem-firewall

I just RMA'ed a FVG318, replaced by a FVS336gV3. The system uses a site to site VPN until the FVG318 died. Now I can't get the 2 x FVS336s to establish a site to site VPN. One of the routers is inst...
JohnC_V's avatar
JohnC_V
NETGEAR Moderator
Jun 11, 2021

reliablesupport,

 

Welcome to our community! :)

 

Setting up a VPN site-to-site connection needs to have the modem to be set to bridge mode. It needs the public IP in order for it to communicate with the remote site. FVS336(2) has a private IP on its WAN port that needs to be changed to public IP. I suggest you set the modem to bridge mode and the VPN will work without any problem.

 

 

 

Regards,

 

John

NETGEAR Community Team

  • reliablesupport's avatar
    reliablesupport
    Aspirant
    Jun 11, 2021

    That is a correct answer but incorrect for this application.

     

    The modem running NAT cannot be replaced because of service contraints. Setting up a site to site vpn tunnel when one of the firewalls is behind a natting modem is trivial once you understand port forwarding.. We do it all the time with the FVG & FVS318 products plus "other" manufacturers firewalls/routers.

     

    Note, this was a case of RMA replacement from a 318 to the 336 model by Netgear.

     

    This is the first time we have tried to use a FVS336 behind a NATting modem & notice the issue & we consider this a defect.

     

    Not only is the 336(1) that is behind the NATting modem reporting payload errors for its 192.168.x.x Wan IP address but the 336(2) with a routable IP address reports the site to site tunnel as connected when a user with an ipsec VPN client connectes to it when they are connected to the LAN on 336(1).

     

    No explanation for this last issue, should not be happening.

    We understand these products are EOL & there is no firmware update path, but this is not right & were hoping that there was a workaround. 

    Thanx.....

NETGEAR Academy

Boost your skills with the Netgear Academy - Get trained, certified and stay ahead with the latest Netgear technology! 

Join Us!

ProSupport for Business

Comprehensive support plans for maximum network uptime and business peace of mind.

 

Learn More