Community discussions

 
ik3umt
Member Candidate
Member Candidate
Topic Author
Posts: 248
Joined: Tue Jul 08, 2014 3:58 pm

How to keep multiple subnets separated over tunnels ?

Thu Apr 23, 2015 3:03 pm

Please , look at diagram :

Image

All 192.168 subnet have to communicate together , as well the 10.0 ones but separating 192 from 10

RIP learn routes immediately but each subnet can reach any other by routing

Can RIP be used with group of subnets ??

With a single WAN address on routerboard , a single GRE tunnel can be estabilished, can I route more subnets in a single tunnel keeping them separated ??

Should I use different solutions for tunneling/routing ??

Thank you
 
Sob
Forum Guru
Forum Guru
Posts: 4802
Joined: Mon Apr 20, 2009 9:11 pm

Re: How to keep multiple subnets separated over tunnels ?

Thu Apr 23, 2015 4:01 pm

What about firewall? Take packets from/to tunnel, accept those from 10.* to 10.* and from 192.168.* to 192.168.* and reject the rest. Any problem with that?
People who quote full posts should be spanked with ethernet cable. Some exceptions for multi-topic threads may apply.
 
ik3umt
Member Candidate
Member Candidate
Topic Author
Posts: 248
Joined: Tue Jul 08, 2014 3:58 pm

Re: How to keep multiple subnets separated over tunnels ?

Thu Apr 23, 2015 4:52 pm

So, a single GRE tunnel with RIP , where all is reachable from all and filtering subnets with firewall rules ??
 
TomosRider
Member Candidate
Member Candidate
Posts: 202
Joined: Thu Nov 20, 2014 1:51 pm

Re: How to keep multiple subnets separated over tunnels ?

Thu Apr 23, 2015 5:02 pm

This should be VLAN related topic.
 
ik3umt
Member Candidate
Member Candidate
Topic Author
Posts: 248
Joined: Tue Jul 08, 2014 3:58 pm

Re: How to keep multiple subnets separated over tunnels ?

Thu Apr 23, 2015 5:49 pm

I should avoid Vlan use,
I wonder if there is any possibility to build two tunnels over a single peer (wan ip address).....
 
User avatar
rmmccann
Member Candidate
Member Candidate
Posts: 182
Joined: Tue Sep 25, 2012 11:15 pm
Location: USA

Re: How to keep multiple subnets separated over tunnels ?

Thu Apr 23, 2015 5:58 pm

I should avoid Vlan use,
I wonder if there is any possibility to build two tunnels over a single peer (wan ip address).....
I would just configure firewall rules on the two routers that have the tunnel. Let the data flow over the tunnel unhindered, and let the router's firewall rules decide what traffic is allowed where via the forward chain.
A common mistake that people make when trying to design something completely foolproof is to underestimate the ingenuity of complete fools. --Douglas Adams
 
ik3umt
Member Candidate
Member Candidate
Topic Author
Posts: 248
Joined: Tue Jul 08, 2014 3:58 pm

Re: How to keep multiple subnets separated over tunnels ?

Thu Apr 23, 2015 6:23 pm

So i'll try that way...
Thanks

Who is online

Users browsing this forum: Majestic-12 [Bot], MSN [Bot] and 109 guests