DMZ with VPN?

[murdocklawless]

I've ubiquiti router after keenetic hero dsl and modem is DMZ to router. is it possible to setup a ipsec/l2tp vpn on hero dsl with DMZ is on?

[KYTECHNGAMING]

5 hours ago, murdocklawless said:

I've ubiquiti router after keenetic hero dsl and modem is DMZ to router. is it possible to setup a ipsec/l2tp vpn on hero dsl with DMZ is on?

https://help.keenetic.com/hc/en-us/articles/360000581969-Connecting-to-an-L2TP-IPSec-VPN-server-from-Windows

I think the answer you are looking for is here

https://prnt.sc/1yukoq0

[Le ecureuil]

I see no objections to do that. Probably UDP/500 and UDP/4500 should be excluded from DMZ, but worth to try.

[murdocklawless]

5 hours ago, Le ecureuil said:

I see no objections to do that. Probably UDP/500 and UDP/4500 should be excluded from DMZ, but worth to try.

 

no, ports are not excluded. otherwise I wouldn't be able to connect to vpn routers. 

 

16 hours ago, yerebakan said:

https://help.keenetic.com/hc/en-us/articles/360000581969-Connecting-to-an-L2TP-IPSec-VPN-server-from-Windows

I think the answer you are looking for is here

https://prnt.sc/1yukoq0

 

Kenetic is sending all ports and protocols to the router. If I forward the ports to the modem as ike and nat-t I can not connect to edgerouter's vpn. I think I can only do this with certain ip 's. ip x.x.x.x forwards to edgerouter vpn, ip y.y.y.y forwards to keenetic vpn. so i can connect to both vpn but unfortunately there are no two different static ip.

[admin]

On 11/9/2021 at 3:09 AM, murdocklawless said:

ubiquiti router after keenetic hero dsl and modem is DMZ to router

I'm not sure if everyone understands how your devices are connected, and even how many of them you have (three? — modem, keenetic, ubiquiti).

Would you draw a picture with IP addresses on all network interfaces.

[murdocklawless]

On 11/10/2021 at 4:32 PM, admin said:

I'm not sure if everyone understands how your devices are connected, and even how many of them you have (three? — modem, keenetic, ubiquiti).

Would you draw a picture with IP addresses on all network interfaces.

here is my network topology.

cable and wifi devices are in 192.168.2.x segment.

Edited November 15, 2021 by murdocklawless
add some info

[admin]

You cannot connect to Keenetic and edgerouter using IPsec at the same time, because you have to decide which of them will accept ports 500 and 4500. Configure edgerouter to forward your requests to Keenetic somehow.