News: This forum is now permanently frozen.
Pages: [1]
Topic: 2 monowall boxes  (Read 5529 times)
« on: December 27, 2007, 19:30:09 »
adrianp918
Guest

how would i connect 2 monowall boxes that are on totally diff ISP's and make them appear as one unit,

both isp are in my house, and i would like to have some pc's on the network on one monobox and some on another

but at the same time have them all accessable from the internal network
« Reply #1 on: December 27, 2007, 20:03:05 »
phillip1983 **
Posts: 64

i think you can do this with the IPSEC VPN and some static routes ?
« Reply #2 on: December 28, 2007, 17:33:10 »
adrianp918
Guest

would you have an example of what i can do to get this to work somewhat?
« Reply #3 on: December 28, 2007, 18:10:52 »
ChainSaw
Guest

Setup your main m0n0wall's LAN IP for something like 192.168.100.1 and your second m0n0wall for 192.168.100.2 and disable the DHCP server on the .2 m0n0wall.  Now depending on witch gateway you assign to each PC will determine witch ISP that PC will use.  Also, since all PCs are on the same LAN segment, they can all talk to each other.

Chainsaw...
« Reply #4 on: December 28, 2007, 18:14:23 »
phillip1983 **
Posts: 64

Doh .... you beat me to it ... lol

yep the above would work. do IPSEC between the boxes disable DHCP on the 2nd box and it should all work....
« Reply #5 on: December 28, 2007, 18:16:17 »
adrianp918
Guest

but as i said on the my post, 4 pc's are on one isp with monowall, and the other 11 are on another monowall box with a diff isp, but botho boxes are in same house, would that still work?
« Reply #6 on: December 28, 2007, 18:17:00 »
phillip1983 **
Posts: 64

yes, this will still work....
« Reply #7 on: December 28, 2007, 18:19:21 »
adrianp918
Guest

ok lan ip meaning the one i use to access monowall liek the 192.168.1.1

« Reply #8 on: December 28, 2007, 18:22:01 »
phillip1983 **
Posts: 64

yep ... assign 192.168.100.1 to the first one and 192.168.100.2 to the second one also disable DHCP on the second one create a IPSEC VPN between the 2 boxes, and thats it , though on the second box you might need to enable the DHCP forwarder thingy ...

Many Thanks...
« Reply #9 on: December 28, 2007, 20:52:30 »
ChainSaw
Guest

yep ... assign 192.168.100.1 to the first one and 192.168.100.2 to the second one also disable DHCP on the second one create a IPSEC VPN between the 2 boxes, and thats it , though on the second box you might need to enable the DHCP forwarder thingy ...

Many Thanks...

Phillip,

What does the IPsec tunnel between m0n0walls buy you?  I'm running this exact configuration now minus the IPsec tunnel and everything work fine.

CS...
« Reply #10 on: December 28, 2007, 20:55:13 »
adrianp918
Guest

kool i think i will give this a go and report back to you, i am new to this ispec and vpn and what not , do i need anything else additional to get this done?
« Reply #11 on: December 28, 2007, 21:00:57 »
ChainSaw
Guest

kool i think i will give this a go and report back to you, i am new to this ispec and vpn and what not , do i need anything else additional to get this done?

As a clarification: all PCs and both m0n0wall (LAN ports) are all connected to the same LAN segment (i.e., same ethernet switch)

CS...
 
Pages: [1]
 
 
Powered by SMF 1.1.20 | SMF © 2013, Simple Machines