LAN with static IPs clients to be accessed via VPN

LAN with static IPs clients to be accessed via VPN

LAN with static IPs clients to be accessed via VPN
LAN with static IPs clients to be accessed via VPN
Monday
Model: ER8411  
Hardware Version: V1
Firmware Version: 1.2.3

Hi,

 

I need to build a VPN tunnel for accessing a LAN created in my Omada system (Router ER8411, Controller OC300).
I have 2 LANs, first is 192.168.0.X/255.255.255.0, second is 192.168.2.X/255.255.255.0
Gateway is 192.168.0.1

With first LAN accessed from VPN, all ok.


My problem is that I need to access some devices that exist in the second LAN, but all devices in the second LAN have static IPs, each without having a gateway set (only IP 192.168.2.X and mask 255.255.255.0). That devices cannot have a gateway set (or to be exact, this is a VoIP structure)
With a local connected computer, set with static IP in the same class (192.168.2.X/255.255.255.0) I'm able to "see" the other devices, but I don't know how to set a VPN to be able to "see" that devices from outside.
I've tried OpenVPN and Wireguard but most probably I'm doing something wrong.
With OpenVPN I get an address from the requested class, but always the mask is 255.255.255.252.
Wireguard configuration I think I do not understand. I fully read and tried the tutorial presented here in the forum but I do not fully understand each parameter, (for example what must be set in "Local IP Address" parameter in the Omada Wireguard  - not Peers - interface).

 

Thank you for your help.

 

 

LAN1-LAN2-OVPN-WIREGUARD LAN1-LAN2-OVPN-WIREGUARD

 

  0      
  0      
#1
Options
3 Reply
Re:LAN with static IPs clients to be accessed via VPN
Monday

  @CostinR1 

OpenVPN is pretty straight forward, you need
1. public ip on the router's wan interface
2. make sure you don't have overlapping lans, I see you do. vpn ip pool should not be the same as any of the lans you have.

 

  0  
  0  
#2
Options
Re:LAN with static IPs clients to be accessed via VPN
Monday - last edited Monday

  @CostinR1 

 

It is true that in most cases you need the gateway (the endpoint of the vpn) to route traffic to a device on a LAN, which would need a gateway set on the target device otherwise traffic could get black-holed

 

What i dont understand is, how can a VOIP device not have a gateway set?  are they internal to internal voip conenctions only?  anything that would be like a phone,. or reaching outside the network would have to have a gateway set to operate, otherwise the device cannot route its externally bound traffic to a gateway?

  0  
  0  
#3
Options
Re:LAN with static IPs clients to be accessed via VPN
Monday

  @GRL 

 

Thank you for your reply,

 

În fact there is a voip exchange device with ip 192.168.2.1, without gateway set, and some voip phones, all of them are set with fixed ip 192.168.2.X, mask 255.255.255.0 and gateway 192.168.2.1 (the voip exchange device).

The voip exchange device has 2 rj45 connectors, one in the LAN, another one to the SIP trunk, and most probably it is hardcoded with a gateway to the SIP.

The phones have only one rj45.

 

Thank you,

  0  
  0  
#4
Options