X
X
xxx2022019-08-20 19:47:14
Computer networks
xxx202, 2019-08-20 19:47:14

Raise vpn through a cascade of routers?

Good afternoon.
Briefly about the situation. In the village, a neighbor connected the Internet via optics (expensive). The Internet is distributed through a router1 (192.168.1.1) with a cable and wifi (2.4 - G, N).
The neighbor kindly offered to share the Internet when I need it. In order not to pull the wires, we made a Wifi bridge (almost a bridge and clumsy). My router2 (receives ip from router 1 and creates a subnet 192.168.2.x) hangs on dd-wrt as a wifi network client (Client is selected in the wireless settings), wifi itself does not distribute, because for this you need to put it in repeater mode, and in this case, the wifi speed drops. In client mode, there is no way to raise a virtual wifi point. To organize wifi, router3 is plugged into router2 (in the lan connector) (into the wan connector and NAT works) - it creates 192.168.3.x - so that my balls are not visible to the neighbor. Actually everything works, the Internet is.
Problem. I can not raise vpn (windows client) to the city computer. If I am connected to router1, the tunnel works. If I am connected by cable to router2, the tunnel does not rise anymore (error 691). When connected to router3, there is also no vpn (error 809).
Question 1. Surely this can be simplified somehow)
Question 2. How to make a working vpn

Answer the question

In order to leave comments, you need to log in

3 answer(s)
X
xxx202, 2019-09-15
@xxx202

The problem was solved by flashing router 2 and 3 and setting up the entire circuit again.
The settings are all the same, I didn’t understand why it didn’t work before.

C
CityCat4, 2019-08-21
@CityCat4

Drilling teeth through the #opu is expensive, long and painful...
Can you still stretch the wires?

N
nApoBo3, 2019-08-21
@nApoBo3

The settings depend on the type of tunnel. It is likely that your (2,3) routers are not configured correctly.
You don't need NAT in this configuration, it is not secure and requires the same firewall configuration as a non-NAT connection. First of all, refuse it, this will somewhat simplify the configuration and understanding how your packets go.

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question