PepVPN L3 Bridging over two networks

Product Discussion Peplink Balance
1

Here’s the network setup.

Head Office
Router: Balance 20
WAN: Public IP Address
LAN: 10.8.1.x/24
Host-A IP: 10.8.1.80

Branch Office:
Router: BR1-Slim
WAN: N/A (over 4G-LTE)
LAN: 192.168.50.x/24
Host-B IP: 192.168.50.100

I have PepVPN (default Layer3) setup and connected between the head office and branch office. B20 in the head is shown as the PepVPN Server, and the BR1 is shown as PepVPN client in the branch.
Host-B in the branch network can ping and access all network nodes within the subnet 10.8.1.x in the head office. All working well and so far so good.

Problem:
Host-A in the head office cannot access the branch network 192.168.50.x at all.
I have configured the B20 to use NAT mode for the remote VPN profile. The BR1 has got a valid VPN IP 10.8.1.149 from the B20.

Question:
How do I configure the B20 & BR-1 such that Host-A can also access the 192.168.50.x in the branch office network?

Many thanks for reply.
Martin Siu

2

This problem can easily be solved by disabling NAT mode for the VPN. With NAT mode the entire 192.168.50.0/24 network will appear as a local IP address to the B20 so sessions can only be established in one direction.

NAT mode however allows you to have multiple remote sites with the same local network and still establish a VPN.

2 Likes
3

Yep, I’ve just tried it. The problem has been fixed by simply disabling the NAT.
Thanks.