site to site VPN, 1 side behind NAT with no port forwarding

[p3tter123]

Hi, I need some configuration help.

I have 1 router directly connected to internet, this will function as a VPN server and NAT to behind devices.

Router nr. 2 will be behind another NAT router. I want this router to connect to the VPN server as a client.

I dont have any control over the external NAT Router.

I need help for both routers to configure this :) 

<---Inside---VPNROUTER--->outside-----INTERNET-----<OUTSIDE---NAT ROUTER-----INSIDE>-------<VPN Client Router>

[Terence Payet]

Hi,

If you are building a site to site VPN across the internet. You will need a public ip address on both devices.

For the VPNROUTER its ok, cause it is directly connected to the internet and am assuming a static public ip address is configured.

As for the VPN Client, since it is behind a NAT router, there's some additional config which needs to be configured on the NAT Router in order to bring up the tunnel.

So basically you will need to gain access to the NAT router.

HTH.

Please rate helpful post.

Regards,

Terence