routing+vpn problem

Hi all!
I have the following question:
I need to connect two lan in a *open lan solution* providing that all
pcs' will connect each other via tcp. But, it's not a real vpn for
that all network is private, which the following scheme:

lan 1:
192.168.75.0/24

linux1:
eth0: 192.168.75.250/24
eth1:10.0.0.0/24

router1
lan: 10.0.0.1/24
wan: 172.24.0.6

--------------------

lan2:
192.168.20.0/24

linux2:
eth0: 192.168.20.250/24
eth1: 10.0.1.0/24

router2:
lan 10.0.1.1/24
wan: 172.24.0.10

I have to connect the two router via tunnel. I can't change the 172.*
IP's, and I DON'T NEED a encrypted trasmission of data for that the
two routers are in a private nerwork.
Connections are ADSL (routers).
The 2 routers are not able to manage a vpn, so they only route from
172.* to 10.* ;
Which is the simplest solution to implement this?
For that clear traffic is enough I didn't think about freeswan or
similar; si there an easier way to connect every pc of the first lan
to every pc of the second lan without making a openvpn crypted?

best regards,
Marco

Marco Marabelli wrote:
>
<skip lan-setup>
>
> I have to connect the two router via tunnel.

Why ? You just want to route traffic from Lan1 to Lan2. I assume that
you do double NAT in each LAN. Is this correct ?

192.168.75. <-> 10.0.0. <-> 172.24.0 <-> 10.0.1 <-> 192.168.20.


you could bypass the whole problem by simply routing the addresses
through all your linux-boxes and routers. This is something your
linux-boxes and your routers should be able to do.

If your routers also do NAT, you dont need to NAT on your linuxbox.

hope this helps,
peter

> similar; si there an easier way to connect every pc of the first lan
> to every pc of the second lan without making a openvpn crypted?
>

yes: routing. Nevertheless there is another thing called broadcasting,
which usually not works over routers and that may affect the ability of
your PC's to browse the networkshares of the PC's in the other subnet.
There are several solutions for this (I assume samba is best, but if you
google for the problem you will find loads of info - if you need this
feature at all)

peter

--
http://www2.goldfisch.at/know_list
http://leblogsportif.sportnation.at