NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
SRX5308 VLAN2 ACROSS VPN
Hi, since lot of years, we have an VPN between 2 sites. ALL DEVICES ARE IN FIXED IP.
We have lot of cellular phone on wifi and we want they can connect wifi wathever the site they are.
So we have added a second LAN to our NETGEAR Firewall (background in red).
On this schema http://ftpdepot.free.fr/netgear.jpg, you can see that we have put 10.92.10.254 on each LAN2, as it, cellular phone have not to change they gateways when their sites change.
The problem is that a terminal wifi from site1 can not "see" a terminal wifi to site2.
We have read and try this solutions:
https://kb.netgear.com/30919/How-to-configure-VLANs-on-a-ProSAFE-Web-Managed-Plus-Switch-with-shared-access-to-the-internet
https://kb.netgear.com/8898/How-do-I-set-up-one-or-more-VLANs-between-a-NETGEAR-ProSAFE-firewall-and-a-smart-switch
Could you give us a solution ?Change configuration ?Change NETGEAR Firewall ?
Thanks.
2 Replies
Here the VPN configuration of Site1 (working):
http://ftpdepot.free.fr/netgear_site1_to_site2_IKE_POLICY.JPG
http://ftpdepot.free.fr/netgear_site1_to_site2_VPN_POLICY.JPG
For my LAN2 (10.92.10.xxx), must i create a new VPN ?
Welcome to the community! :)
It might be possible that the cause of the problem is that 10.92.10.xxx LAN WiFi on Site 1 has the same IP Subnet on the LAN WiFi on Site 2 which is 10.92.10.xxx as well. Kindly try to change the IP Subnet on LAN WiFi Site 2 to a different subnet (for example: 10.92.20.xxx).
Just wanted to know. How about the 10.92.1.xxx from Site 1, are they able to communicate with the 10.92.2.xxx on Site 2? If yes, the you need to try my suggestion above.
Regards,
DaneA
NETGEAR Community Team
NETGEAR Academy
Boost your skills with the Netgear Academy - Get trained, certified and stay ahead with the latest Netgear technology!
Join Us!
