Pepvpn rule for external firewall


#1

hi,
(12.168.1.0/24) Lan1------Firewall–(192.168.3.0/24)----peeplink—router … router—peeplink—(192.168.4.0/24)–firawlall—Lan2 (192.168.2.0/24)
My VPN between the 2 Peeplink Balance is Ok
I need to know witch rules i have to add on my firewalls to permit acces using my VPN.
on the first firewall, ihave to add accept trafic from 192.168.3.0/24 or from 192.168.2.0/24?
thank you


#2

Hi,

Once PepVPN was established between Peplink routers, IP subnet for 192.168.3.0/24 and 192.168.4.0/24 can be communicate directly without any blocking by default. You may need to add static route (Network > Network Settings > Static Route Settings) for 192.168.1.0/24 and 192.168.2.0/24 on Peplink routers if both of the firewall are running in transparent mode. Below is the example.

First Peplink router
Destination Network = 192.168.1.0/24
Subnet Mask = 255.255.255.0
Gateway = 192.168.3.x (First firewall WAN IP)

Second Peplink router
Destination Network = 192.168.2.0/24
Subnet Mask = 255.255.255.0
Gateway = 192.168.4.x (Second firewall WAN IP)


#3

thank’s for reply

(12.168.1.0/24) Lan1------Firewall watchguard xtm–(192.168.3.0/24)----peeplink—router … router—peeplink—(192.168.4.0/24)—Firewall watchguard xtm----Lan2 (192.168.2.0/24)

but my problem is how to permit this lan1 (12.168.1.0/24) over pepvpn to access this lan2 (192.168.2.0/24) across the watchguard firewall
what rules do i have to make in watchguards (if i accept all trafic from (192.168.4.0/24) it’s like if the firewall isn’t exist i think)
thank’s lot


#4

Hello,

If you have other networks behind the Balance, you must define them and make the Balance aware as by default it will only broadcast/learn the Native LAN.

Typically, you would create a VLAN or Static Route in the Balance for any other networks besides the Native.
See TK’s last response for setup of Static Routes if not using VLAN’s.

As far as rules being made in the watchguard, you may need to contact there support team for proper configuration