Question

I have tryed to follow this instruction on https://wiki.teltonika-networks.com/view/IPsec_configuration_examples but i want to use the "Configuration scheme 2" scenario, but the guide is only for "Configuration scheme 1" scenario... What is part 2 in the guide to access my NAS server *3 on site A "RUT X10" from my computers on site B "RUT950"? I have MacOS on my computers *5 and i use AFP "apple file protocol" to connect to my NAS Servers and between me computers and want to use afp between NAS Servers on site A to the computers on site B.

Do i need to use IPSec/L2TP or will it be only IPSec?

Do i must open some ports on firewall or change some others firewall settings?

Thankful for a quick answer!

Answer 1

Hi,

https://wiki.teltonika-networks.com/view/IPsec_configuration_examples

You probably didn't read it well as it clearly explains that Configuration Example 2 is reached once you're done with all the steps.

As mentioned earlier, configuration scheme 2 (figure above) is an extension of configuration scheme 1. While configuration scheme 1 only depicts a connection between two IPsec instances, you can see that configuration scheme 2 additionally contains two end devices (END1 and END2), each connected to a separate router's LAN. When this scheme is realized, not only will the two routers be able to communicate with each other, but the end devices will also be reachable to one another and from each router.

And in the end there's this:

You can also test if LAN access is working the same way. Instead of pinging the opposite instance's LAN IP address, ping one of the end device's IPs. One common issue that can be encountered here is that the end devices might need their DHCP leases renewed. There are many methods of accomplishing this, but the easiest and most accessible way is to simply disconnect and reconnect the LAN cable to device or the router that it's connected to.

EB.

Comments

I have follow the guide and when i try to ping my site B from site A i only get:
Request timeout for icmp_seq 0
Request timeout for icmp_seq 1
Request timeout for icmp_seq 2
Request timeout for icmp_seq 3

it´s the same when i try to ping from site B to site A.

When i ping a device inside the local network on site A it´s work and the same on site B i can ping inside firewalls but not to the outside.

---

Could you paste screenshots of both router IPSec configurations?

EB