Speedfusion VPN access

General
1

Picture1
Picture11035×465 46 KB

Hello all,

Good day.

I am currently working on setting up a Peplink Balance 210 for two offices (Singapore and Japan) connected through SpeedFusion VPN. I’m facing an issue with accessing a local web server in the Japan office from a user PC in the Singapore office.

The two Peplink devices are connected via SpeedFusion VPN.

Problem:

From my user PC in the Singapore office (192.168.128.X), I’m unable to access the web server in the Japan office at 192.168.51.100:8080.

What I’ve Tried:

  1. I have checked firewall rules on both Peplink devices to ensure there are no blocks between the networks.
  2. I’ve tested the VPN connection and it is established.

However, I am still unable to access the web server in Japan from my Singapore PC.

Questions:

  • Am I missing any configurations on the Peplink or Singapore Fortigate router?
  • Should I be setting up port forwarding on the Japan Peplink for port 8080?
  • Is there something specific in the SpeedFusion settings that I need to adjust?

Any help or suggestions would be greatly appreciated!

Thank you in advance for your assistance.

2

Check some stuff:

  1. Can you ping 192.168.51.1 from 192.168.128.100? If so routing over your Speefusion VPN is working
  2. Can you then ping the web server? If ping works but web access doesn’t you might have a source IP web server filter in place.
  3. Does the web server have a default gateway set?
  4. Can the web server ping 192.168.51.100 or 192.168.51.1
1 Like
4

Ah so traffic is not flowing from the USER PC via the WAN of the Peplink.

Is the WAN on the Singapore Peplink (192.168.128.80) set to IP forwarding? I suspect it is still NAT? If so you will need that changed to IP forwarding.
You also need to tell your User PC that to get to the JAPAN office Peplink LAN (192.168.51.0/24) that the next hop is the WAN of the Peplink (192.168.128.80).

I suspect the default gateway on your user PC is the Fortigate. So add a static route on the fortigate for 192.168.51.0/24 > 192.168.128.80. Or you can add a static route locally on the User PC if you prefer.

2 Likes
5

Hi Martin,

Apologies for the confusion. I misunderstood the request.

I’ve updated the diagram for the latest setup. Based on it, can I configure Static NAT to route the SG Public IP (203.0.113.42) to the Japan Office web server via the SpeedFusion VPN?

I understand that the public IP was issued by the SG ISP but we’re planning to use it to host the website at the Japan Office.

Picture1
Picture1894×645 58.5 KB

6

Yes. two ways. With NAT on SG Peplink and without.

With NAT:

  1. Port forward http(s) ports from 203.0.113.42 on your Fortigate to the WAN IP of the SG Peplink (192.168.128.80)
  2. On your SG B210, Port forward from 192.168.128.80 to 192.168.51.100
  3. On your JP B210 setup a priority based outbound policy rule for 192.168.51.100 as the source and set the tunnel to SG as priority1

Without NAT you need to

  1. disable NAT on your SG B210 WAN,
  2. Make sure your WAN is advertised over OSPF on your SG B210
  3. add a static route for 192.168.51.0/24 to your JP fortigate with a next hop of 192.168.128.80
2 Likes