Question about FusionHub Using SpeedFusion VPN with Same Subnet

Product Discussion
,
1

Hi Supports,

We understand that SpeedFusion VPN on FusionHub can utilize an L2 Tunnel to allow Peplink routers at both ends to share the same broadcast domain and subnet. This enables devices to communicate with each other as if they were on the same internal network.

1
11121×387 40 KB

However, since the FusionHub instance is hosted on a cloud platform, its virtual network interface (NIC) does not support L2 communication (due to cloud infrastructure limitations). Even when an L2 VPN is established, servers on the cloud side cannot ping the local Peplink router or client devices; only the FusionHub instance itself can reach them.

Aside from using an L2 Tunnel to allow devices at both ends to communicate within the same subnet, are there any other methods or workarounds to achieve this functionality?

Thanks and Regards,
Kevin

2

If the requiremnt is L2 bridging from the remote Peplink to the cloud hosted network and the cloud hosting provider does not allow Promiscuous mode (or whatever is blocking the ability to L2 bridge) then all you can really do is change youe cloud hosting provider.

However, if you need to build a L2 bridge between physical devices that should still work

[DEVICE] <> [FUSIONHUB] <> [DEVICE]

Guess it depends on the use case and topology requirement…

2 Likes
3

I should add that you could teleport your L2 traffic over SpeedFusion to a Fusionhub in another Cloud environment that does support promiscious mode then break out there…

2 Likes
4

Hi Martin,

OK, Thank you for your reply.

Thanks and Regards,
Kevin

5

Hi Sir,

I had the same issue. Did you manage to get the L2 topology working on the cloud?
Need you help , thanks.

Regards and Thanks,
Bit.

6

Yes I did. I used to use vultr.com a lot for hosting fusionhubs and used to do L2 VPN there.

Each fusionhub would get a dedicated WAN and LAN NIC and the remote Peplinks built a L2 VPN to the Fusionhub.

On the LAN in the cloud I would host a OPNSENSE firewall vm and then it would provide DHCP and act as the gateway for that L2 VPN/LAN segment.

Today I tend to rent dedicated servers running proxmox and these are much more customisable of course.

1 Like