Solved

VPN to independent networks at our offices using one vpn connection

Posted on 2015-01-24
5
207 Views
Last Modified: 2015-01-25
Hello

We need to upgrade our firewall and one of the features required is the ability to connect remotely in to the various networks at our office that are independent of each other i.e. they don't have an ip assigned that's on another network/subnetwork (in Juniper parlance no Secondary IPs) but using just one vpn connection/tunnel on the remote client.

For example I remote in and am connected to our main network of 172.16.x.x but want to connect to the 192.168.x.x networks as well but there is no routing between them.

Is this feasible and if so does it have proper name so I can make sure the firewall we get does it?

Thanks
0
Comment
Question by:dejected
  • 2
  • 2
5 Comments
 
LVL 94

Accepted Solution

by:
John Hurst earned 250 total points
ID: 40568213
Most client applications only allow one tunnel at a time.

I use a Cisco RV042G in my home office and have several simultaneous clients all with different IP addresses and no routing between them. This will do what you want.
0
 
LVL 69

Assisted Solution

by:Qlemo
Qlemo earned 250 total points
ID: 40568477
Agree with above. You'll need multiple (Phase 2) tunnels, also called "Multiple Secured Networks", but that isn't really a standardized name for it. Assuming you mean a single firewall having access to all those separate networks, and managing the dial-in VPN connections. That's no issue for firewalls usually, but for the VPN clients. ShrewSoft, NCP both are able to.
0
 

Author Closing Comment

by:dejected
ID: 40569078
Thanks very much. Another part of the brief was not having to have a proprietary/paid-for vpn client software but that seems unavoidable with what you have both said. So any firewall should do - that's good news. Now I have to pick one...
0
 
LVL 94

Expert Comment

by:John Hurst
ID: 40569121
@dejected  - Thanks for the update.

Now I have to pick one...   <-- There are a number to choose from. I use Cisco RVxx myself. and Juniper Netscreen at clients.
0
 
LVL 69

Expert Comment

by:Qlemo
ID: 40569167
In regard of the clients, ShrewSoft is free (but "unsupported" besides having a community), and NCP is not (and gets you support by the manufacturer).
The Juniper IPsec VPN client is now NCP, too.
0

Featured Post

Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

OpenVPN is a great open source VPN server that is capable of providing quick and easy VPN access to your network on the cheap.  By default the software is configured to allow open access to your network.  But what if you want to restrict users to on…
When it comes to security, there are always trade-offs between security and convenience/ease of administration. This article examines some of the main pros and cons of using key authentication vs password authentication for hosting an SFTP server.
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
Internet Business Fax to Email Made Easy - With  eFax Corporate (http://www.enterprise.efax.com), you'll receive a dedicated online fax number, which is used the same way as a typical analog fax number. You'll receive secure faxes in your email, f…

685 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question