ML
    • Recent
    • Categories
    • Tags
    • Popular
    • Users
    • Groups
    • Register
    • Login

    Static Router - EdgeRouter Lite

    IT Discussion
    6
    34
    4.8k
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • scottalanmillerS
      scottalanmiller
      last edited by

      This is what adding a route looks like on VyOS:

      set protocols static route 0.0.0.0/0 next-hop '190.66.11.49'

      1 Reply Last reply Reply Quote 0
      • DashrenderD
        Dashrender @scottalanmiller
        last edited by

        @scottalanmiller said:

        @Dashrender said:

        Have you done a route add command?

        I don't believe that there is a route add command on the ERL.

        Good to know, but you still knew what I was getting at. 😉

        1 Reply Last reply Reply Quote 0
        • dafyreD
          dafyre
          last edited by dafyre

          You will need to add static routes both on the ERL for EACH VLAN on the other end of the VPN that you want to access.

          On your core switch at HO, you'll need to add a static route back to WHS...

          Assume the following Networks:

          WHS Subnet: 192.168.100.0/24
          WHS ERL: 192.168.100.1/24
          WHS VPN to HO: 192.168.5.158/24

          HO Subnet: 192.168.5.0/24
          HO Core Switch, VLAN 5: 192.168.5.1/24
          HO Core Switch, VLAN 10: 192.168.10.1/24
          HO Core Switch, VLAN 15: 192.168.15.1/24

          On the WHS ERL, you'll need to add static routes:
          192.168.5.0/24 via 192.168.5.158
          192.168.10.0/24 via 192.168.5.158
          192.168.15.0/24 via 192.168.5.158

          On the HO Core switch, I believe you only have to add the following route:

          192.168.100.0/24 via 192.168.5.158

          Does that make sense?

          Edit: The above is an idea only... Figure out the appropriate web or cli synax to make it happen.

          1 Reply Last reply Reply Quote 1
          • J
            Jason Banned
            last edited by

            Can the VPN not advertise the routes, so you don't have to do it statically on each client?

            JaredBuschJ 1 Reply Last reply Reply Quote 1
            • JaredBuschJ
              JaredBusch @Jason
              last edited by

              @Jason said:

              Can the VPN not advertise the routes, so you don't have to do it statically on each client?

              Depends on the VPN technology in use. But yes it can be specified in the ERL GUI for IPSEC or command line for OpenVPN

              1 Reply Last reply Reply Quote 0
              • hobbit666H
                hobbit666
                last edited by

                0_1457365258208_basic whs route.png

                So I've setup the draytek and ERL VPN adding the main IPs to the Local/Remote boxes.
                As default from whs I can ping the Core switch and everything on the "HO LAN", but nothing on the VLAN15 side even the VLAN IP on the Cisco Switch.

                I've tried a few ways of adding the static route to the ERL but nothing seems to help.

                The draytek can ping all addresses.

                dafyreD 1 Reply Last reply Reply Quote 0
                • hobbit666H
                  hobbit666
                  last edited by

                  Here is the ERL GUI
                  0_1457365996217_ERL-IPSEC.png
                  I have tried added the VLAN lan to that but still no go.

                  dafyreD 1 Reply Last reply Reply Quote 0
                  • dafyreD
                    dafyre @hobbit666
                    last edited by

                    @hobbit666 said:

                    0_1457365258208_basic whs route.png

                    So I've setup the draytek and ERL VPN adding the main IPs to the Local/Remote boxes.
                    As default from whs I can ping the Core switch and everything on the "HO LAN", but nothing on the VLAN15 side even the VLAN IP on the Cisco Switch.

                    I've tried a few ways of adding the static route to the ERL but nothing seems to help.

                    The draytek can ping all addresses.

                    Can we get a screenshot of the Static Routes page on the ERL, and the show route command on the Cisco?

                    1 Reply Last reply Reply Quote 0
                    • dafyreD
                      dafyre @hobbit666
                      last edited by

                      @hobbit666 said:

                      Here is the ERL GUI
                      0_1457365996217_ERL-IPSEC.png
                      I have tried added the VLAN lan to that but still no go.

                      Is this screen shot the page of the VPN setup?

                      dafyreD 1 Reply Last reply Reply Quote 0
                      • hobbit666H
                        hobbit666
                        last edited by

                        0_1457366167790_ERL Routes.png

                        1 Reply Last reply Reply Quote 0
                        • hobbit666H
                          hobbit666
                          last edited by

                          I've tried adding the route here via 10.0.1.220 and 10.0.1.242 but doesn't do anything

                          dafyreD 1 Reply Last reply Reply Quote 0
                          • dafyreD
                            dafyre @hobbit666
                            last edited by

                            @hobbit666 said:

                            I've tried adding the route here via 10.0.1.220 and 10.0.1.242 but doesn't do anything

                            Is the Draytek a router, or a VPN appliance?

                            hobbit666H 1 Reply Last reply Reply Quote 0
                            • hobbit666H
                              hobbit666 @dafyre
                              last edited by

                              @dafyre VDSL Router

                              1 Reply Last reply Reply Quote 0
                              • hobbit666H
                                hobbit666
                                last edited by

                                0_1457366401298_cisco routes.png

                                1 Reply Last reply Reply Quote 0
                                • hobbit666H
                                  hobbit666
                                  last edited by

                                  Vlan setup
                                  0_1457366452414_cisco vlan.png

                                  1 Reply Last reply Reply Quote 0
                                  • dafyreD
                                    dafyre
                                    last edited by

                                    When the WHS system connects to the draytek, does it get a 10.0.1.x IP ?

                                    hobbit666H 1 Reply Last reply Reply Quote 0
                                    • hobbit666H
                                      hobbit666 @dafyre
                                      last edited by

                                      @dafyre said:

                                      When the WHS system connects to the draytek, does it get a 10.0.1.x IP ?

                                      ???? No it's an IPSEC Site to Site VPN

                                      1 Reply Last reply Reply Quote 0
                                      • dafyreD
                                        dafyre @dafyre
                                        last edited by

                                        @dafyre said:

                                        @hobbit666 said:

                                        Here is the ERL GUI
                                        0_1457365996217_ERL-IPSEC.png
                                        I have tried added the VLAN lan to that but still no go.

                                        Is this screen shot the page of the VPN setup?

                                        What if you choose the "Add Subnets" button in this image?

                                        And add the other subnets?

                                        JaredBuschJ 1 Reply Last reply Reply Quote 0
                                        • JaredBuschJ
                                          JaredBusch @dafyre
                                          last edited by

                                          @dafyre said:

                                          @dafyre said:

                                          @hobbit666 said:

                                          Here is the ERL GUI
                                          0_1457365996217_ERL-IPSEC.png
                                          I have tried added the VLAN lan to that but still no go.

                                          Is this screen shot the page of the VPN setup?

                                          What if you choose the "Add Subnets" button in this image?

                                          And add the other subnets?

                                          He said he tried that.

                                          1 Reply Last reply Reply Quote 1
                                          • JaredBuschJ
                                            JaredBusch
                                            last edited by

                                            You definitely need the additional subnets listed in the ERL config.

                                            You also need to add them to the other end. Not familiart with the Draytek IPSEC settings, so hard to help there.

                                            1 Reply Last reply Reply Quote 0
                                            • 1
                                            • 2
                                            • 1 / 2
                                            • First post
                                              Last post