Dual-network IP assignments on one NIC / Routing

Hi,

I have an unusual configuration: my office and home are connected via
hardware VPN.

Office: 192.168.5.0/24
Home: 192.168.15.0/24

I have a client who I needed to VPN to and they use:

192.168.0.0/24
192.168.1.0/24
192.168.2.0/24
192.168.3.0/24
192.168.4.0/24
192.168.5.0/24

I need to connect to their 192.168.0.0/24 network, and I do so through
my home router's 15 network since it does not conflict with my client's
networks. I would like to connect to this client's 192.168.0.0/24
network from my office.

I began routing 192.168.0.0/24 packets from my 192.168.5.0/24 office
network to my home-router which in turn sends them up to the client.
Unfortunately, in my shortsightedness, I hadn't realized that the
return packets would be routed at the client's router to their own
192.168.5.0/24 network.

Is it possible to assign a secondary 192.168.15.0/24 IP to my office
machine, and route its 192.168.0.0/24 requests properly? I'm rather
confused with my resulting route-table on my office machine after
adding the second IP address:

IPs
192.168.5.130
192.168.15.101
Gateways
192.168.5.254
192.168.15.254

Active Routes:
192.168.5.130 255.255.255.255 127.0.0.1 127.0.0.1
20

192.168.15.0 255.255.255.0 192.168.15.101 192.168.5.130
1
192.168.15.101 255.255.255.255 127.0.0.1 127.0.0.1
20
192.168.15.255 255.255.255.255 192.168.15.101 192.168.5.130
20

224.0.0.0 240.0.0.0 192.168.5.130 192.168.5.130
20
255.255.255.255 255.255.255.255 192.168.5.130 192.168.5.130
1
255.255.255.255 255.255.255.255 192.168.15.101 10003
1
255.255.255.255 255.255.255.255 192.168.15.101 10005
1

Default Gateway: 192.168.5.254

After adding this 15 IP address, I can no longer access my home network
since it looks like this traffic's gateway is forced to be
192.168.15.101.

192.168.15.255 255.255.255.255 192.168.15.101 192.168.5.130

If I try to assign a different gateway to this routing, it will not
change. No error, just no change in the routing table:

route add 192.168.15.0 mask 255.255.255.0 192.168.5.130

What am I missing?

Thanks!

I would NAT between your hub network and the client networks.

<(E-Mail Removed)> wrote in message
news:(E-Mail Removed) oups.com...
> Hi,
>
> I have an unusual configuration: my office and home are connected via
> hardware VPN.
>
> Office: 192.168.5.0/24
> Home: 192.168.15.0/24
>
> I have a client who I needed to VPN to and they use:
>
> 192.168.0.0/24
> 192.168.1.0/24
> 192.168.2.0/24
> 192.168.3.0/24
> 192.168.4.0/24
> 192.168.5.0/24
>
> I need to connect to their 192.168.0.0/24 network, and I do so through
> my home router's 15 network since it does not conflict with my client's
> networks. I would like to connect to this client's 192.168.0.0/24
> network from my office.
>
> I began routing 192.168.0.0/24 packets from my 192.168.5.0/24 office
> network to my home-router which in turn sends them up to the client.
> Unfortunately, in my shortsightedness, I hadn't realized that the
> return packets would be routed at the client's router to their own
> 192.168.5.0/24 network.
>
> Is it possible to assign a secondary 192.168.15.0/24 IP to my office
> machine, and route its 192.168.0.0/24 requests properly? I'm rather
> confused with my resulting route-table on my office machine after
> adding the second IP address:
>
> IPs
> 192.168.5.130
> 192.168.15.101
> Gateways
> 192.168.5.254
> 192.168.15.254
>
> Active Routes:
> 192.168.5.130 255.255.255.255 127.0.0.1 127.0.0.1
> 20
>
> 192.168.15.0 255.255.255.0 192.168.15.101 192.168.5.130
> 1
> 192.168.15.101 255.255.255.255 127.0.0.1 127.0.0.1
> 20
> 192.168.15.255 255.255.255.255 192.168.15.101 192.168.5.130
> 20
>
> 224.0.0.0 240.0.0.0 192.168.5.130 192.168.5.130
> 20
> 255.255.255.255 255.255.255.255 192.168.5.130 192.168.5.130
> 1
> 255.255.255.255 255.255.255.255 192.168.15.101 10003
> 1
> 255.255.255.255 255.255.255.255 192.168.15.101 10005
> 1
>
> Default Gateway: 192.168.5.254
>
> After adding this 15 IP address, I can no longer access my home network
> since it looks like this traffic's gateway is forced to be
> 192.168.15.101.
>
> 192.168.15.255 255.255.255.255 192.168.15.101 192.168.5.130
>
> If I try to assign a different gateway to this routing, it will not
> change. No error, just no change in the routing table:
>
> route add 192.168.15.0 mask 255.255.255.0 192.168.5.130
>
> What am I missing?
>
> Thanks!
>

Thanks for the advice!

I'd love to NAT, but I'm using two Netgear FVS318s. I know of no
conceivable way of NATing. What I DID try was to split the 15 network
into 192.168.15.0/ and 192.168.15.128/ . The 15.0 for the home and the
15.128 for the office.

Basically, I have two static routes on my office box and one on my home
box:

Home: 192.168.15.0 MASK 255.255.255.128 192.168.5.254
Office: 192.168.15.0 MASK 255.255.255.128 192.168.5.254
192.168.0.0 MASK 255.255.255.0 192.168.15.254

192.168.15.254 is the home router that connects to the client's
192.168.0.0/24 network.

Right now, I'm trying to ping back to an office-machine's 15.0 IP
address from home without luck. I can ping this internal 192.168.15.0
IP from within my 192.168.5.0/24 network though since I have a static
route for it at the office router.

Why would the packets from my home network not get properly delivered
to my 192.168.5.254 router?

The routes are wrong.
Should be....

At Home: (on machines only, not Netgear Box)
192.168.15.128 MASK 255.255.255.128 <Home Netgear IP>

At Office: (on machines only, not Netgear Box)
192.168.15.0 MASK 255.255.255.128 <Office Netgear IP>

I see no point in the other 3rd route.
The Netgear boxes don't need a "route" added on themselves,...they are
already "aware" of what they directly connect to.

*Also*, if the Netgear boxes are also used for the Internet (most likely
are), then you shouldn't need any routes added anywhere since the Netgears
boxs are already used for "unknown" destinations to begin with, so the
clients will send any traffic to them that isn't part of their own local
subnet (determined by the Mask). Since the Netgear boxes are already aware
of any "directly-connected-networks" (which the VPN makes that "true") they
will already know what to do with traffic for the opposite subnet at the
other end of the VPN link.

Static routes are only required when there are two subnets separated by a
*third* subnet that is between them,...and I don't think that is the case
here by what you described. The VPN creates a simple *two* subnet setup
with the two subnets being directly-connected to each other,...the fact that
the Internet is between them on the outside of the Tunnel is irrelevant.

--
Phillip Windell [MCP, MVP, CCNA]
www.wandtv.com




<(E-Mail Removed)> wrote in message
news:(E-Mail Removed) ups.com...
> Thanks for the advice!
>
> I'd love to NAT, but I'm using two Netgear FVS318s. I know of no
> conceivable way of NATing. What I DID try was to split the 15 network
> into 192.168.15.0/ and 192.168.15.128/ . The 15.0 for the home and the
> 15.128 for the office.
>
> Basically, I have two static routes on my office box and one on my home
> box:
>
> Home: 192.168.15.0 MASK 255.255.255.128 192.168.5.254
> Office: 192.168.15.0 MASK 255.255.255.128 192.168.5.254
> 192.168.0.0 MASK 255.255.255.0 192.168.15.254
>
> 192.168.15.254 is the home router that connects to the client's
> 192.168.0.0/24 network.
>
> Right now, I'm trying to ping back to an office-machine's 15.0 IP
> address from home without luck. I can ping this internal 192.168.15.0
> IP from within my 192.168.5.0/24 network though since I have a static
> route for it at the office router.
>
> Why would the packets from my home network not get properly delivered
> to my 192.168.5.254 router?
>