• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 928
  • Last Modified:

IPSec VPN - Bridge setup

Hi,

I have to setup an IPSec VPN between to sites with juniper firewalls and we would like to communicate the two sited through the same network, I think this is called "Bridge setup".

We have the network 10.100.2.0/24 and the other site want to use the same network... Is it possible?, How should we configure this environment?.

Thanks in advanced.
/regards.
0
ecemibm
Asked:
ecemibm
  • 2
2 Solutions
 
ythevenotCommented:
0
 
QlemoC++ DeveloperCommented:
No - not that easy, at least. Juniper does not support ethernet bridging via an IPSec tunnel. You need to apply routing, and that means that you can't use the same addresses on both sides. The Juniper devices need to know where to go to for each address referenced, and the local stations need to differ between both networks.
My recommendation is to use the lower half at one site and the upper at the other, making a /25 network each. The core network address remains, but it is always straightforward at which side an address is located.

Another workaround is to use 1:1 NAT on both sides. That is, translate site A addresses to 10.100.3.0/24 on site B, and site B addresses on site A to 10.100.4.0/24. However, that confuses services working with IP addresses, like DNS - you would need to manually set that up on each site (for the other site). I do not recommend this.
0
 
QlemoC++ DeveloperCommented:
The PDF above shows the second method I mentioned.
0

Featured Post

 The Evil-ution of Network Security Threats

What are the hacks that forever changed the security industry? To answer that question, we created an exciting new eBook that takes you on a trip through hacking history. It explores the top hacks from the 80s to 2010s, why they mattered, and how the security industry responded.

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now