[ previous ] [ next ] [ threads ]
 
 From:  Steve Bertrand <iaccounts at ibctech dot ca>
 To:  m0n0wall at lists dot m0n0 dot ch
 Subject:  Re: [m0n0wall] NAT an internal address to a DMZ address?
 Date:  Thu, 31 May 2007 10:26:34 -0400
> Wait a sec...  I think I got lost.  You are on 192.168.3.0/24 and they
> are on 192.168.75/24, but to get to them you need to "appear" to be
> 10.100.2.0/24?  OK, this is doable, but you will need more boxes.  NAT
> goes out the WAN.  So you need a additional m0n0wall box.  WAN will be
> in your DMZ (10.100.2.10) and LAN will be in your LAN (192.168.3.10) and
> this box will VPN to them.  It will NOT have DHCP enabled.  You will put
> a static route in your m0n0wall box with 192.168.75.0/24 gateway at
> 192.168.3.10 (Your other box) and it will work.  Messy, but the only way
> to get this hack to work that I can think of.

Marty,

If your subnet mask at both sites are /24 (255.255.255.0), and Lee has
it correct (you are .3 and remote is .75), then traditional routing will
work just fine from 192.168.3.x to 192.168.75.x through the VPN.

Where it won't work is if you have a /16 bitmask as opposed to the /24.

Steve