topic Re: VPN Tunnel in VPN Tunnel possible? in Firewall and Security Management

VPN Tunnel in VPN Tunnel possible?

Jan_Kleinhans — Thu, 17 Jun 2021 06:40:30 GMT

Hello,

we have the following task to resolve.

We will get a VPN Tunnel to a mobile provider with an own network (APN) which is only for us and can only connect to our network over the provider based VPN Tunnel.

To encrypt traffic also from the mobile provider we would like to run a VPN Tunnel from the mobile Gateways (4G Routers with ipsec capability) to our gateway.

Is this possible with one VPN Gateway? Or do we have to place a VPN gateway behind the gateway which holds the tunnel to the provider?

I would not know how to create the topology for the interoperable device when using only one central gateway.

Let's asume we have a tunnel between 1.0.0.10 (Mobile Provider) and 8.0.0.10 (our Gateway).
The network provided by the mobile provider for our 4G-gateways will be 10.0.0.0/24 so this should be the topology of object 1.0.0.10.
For each 4G gateway there would be an interoperable device with IP 10.0.0.11 for example and 10.0.0.11/32 as topology.
Would this work with only one VPN gateway on our side?

Regards,

Jan

Re: VPN Tunnel in VPN Tunnel possible?

G_W_Albrecht — Thu, 17 Jun 2021 08:06:28 GMT

What is the reason to encrypt data 2 times ? If a very secure internal connection is needed you can achive it using Access Rules.

Re: VPN Tunnel in VPN Tunnel possible?

Jan_Kleinhans — Thu, 17 Jun 2021 08:11:39 GMT

The traffic could be captured by the mobile provider or somebody who gets access to the network of the mobile provider.

Re: VPN Tunnel in VPN Tunnel possible?

G_W_Albrecht — Thu, 17 Jun 2021 12:39:56 GMT

I think this is not possible with one VPN GW on main site - i would suggest that you ask CP !

Other idea: Router with VPN to mobile provider before GW that connects to the 4G-gateways.