Trying to create a lan-to-lan vpn between two differents networks

Collapse
X
 
  • Time
  • Show
Clear All
new posts
  • TSSRALBI
    New Member
    • Apr 2024
    • 1

    Trying to create a lan-to-lan vpn between two differents networks

    Hello

    I'm a network technician in training and I need your help.
    I am currently learning how to create and manage the different types of VPNs and I have a question about LAN-to-LAN VPNs.
    The last exercise I practiced was to create a LAN-to-LAN VPN between two Pfsense firewalls, by using IPSEC protocols.
    I succeeded, with both firewalls in the same network. But I'm wondering if it's possible to do the same thing, with 2 Pfsense firewalls in two different networks.
    Can anyone tell me if it's possible and, if so, give me some advice on how to set up this VPN?
    Thanks in advance ^^

    P.S : i'm french, so my english can be a little bit clumsy.
  • lu123
    New Member
    • Aug 2024
    • 5

    #2
    Yes, it's definitely possible to set up a LAN-to-LAN VPN between two pfSense firewalls in different networks using IPsec.

    Public IP Addresses: Ensure both pfSense firewalls have public IP addresses.

    Configure Firewall A:
    Go to VPN > IPsec and add a new tunnel.
    Set the Remote Gateway to the public IP of Firewall B.
    In Phase 1, use Mutual PSK for authentication and configure the encryption settings.
    In Phase 2, specify the local (e.g., 192.168.1.0/24) and remote networks (e.g., 192.168.2.0/24).

    Configure Firewall B:
    Repeat the same steps as above, but set the Remote Gateway to the public IP of Firewall A.

    Firewall Rules: Allow traffic on the IPsec interface on both firewalls.

    Test the Connection: Check the VPN status and try pinging devices across the VPN.

    Product Recommendation

    For reliable networking equipment, consider looking into Baudcom products. They offer a range of solutions that can complement your VPN setup.

    If you have any further questions, feel free to ask! Good luck with your training!

    Comment

    Working...