vpn different subnets

[alexbak79]

Hello experts!

I have a problem unsolved over past few weeks regarding cisco easy vpn server. I have a cisco 887 successfully set up acting as vpn server from which my brother connects via client. The question is simple yet very challenging to implent (I suppose) since I have’t got yet a clear answer:

Suppose we have the most simple vpn server configuration and two different networks: 192.168.1.0/24 from my side 192.168.2.0/24 remote (let’s say easy vpn gives 192.168.2.2/32 to remote client). What configuration is needed on the ROUTER! Not on the windows, on the router in order for both of us to see computers AND workgroups (if applicable) on network neighborhood?

Finally on a site to site vpn I had also the same problem: nothing was viewable on network neighborhood, yet connectivity existed between computers.

That’s all. Thank you in advance

PS If I issue the command tracert 192.168.1.2 on windows the name can be resolved..

[JORGE RODRIGUEZ]

Hi Alex,

If I recall correctly Windows uses broadcast messaging  using NetBIOS, unfortunately  NetBIOS is not supported over VPN tunnel as it sends broadcasts/multicasts to the network in order to perform the name resolution discovery etc..

You may be able to  workaround this issue  using L2L Vpn, but  you would need to use  GRE  over Ipsec   and forward NetBIOS  protocols   and have GRE   carry  broadcast/multicast  traffic over the Ipsec  tunnel in order  for network neighborhood to work properly.   This implementation is done  by  two routers where the VPN   terminate Ipsec tunnels   such as seeing in  L2L  VPNs , but this is not possible in a  windows ipsec VPN  client to VPN server  scenario that Im aware of .

Regards

[alexbak79]

Hello, thanks for reply

As for site to site vpn i mentioned, i applied ipsec over gre using a cisco 887 and an old 877 on the other end. Even though i used mechanisms like ip multicast-routing, ip helper-address, directed broadcasts etc. on both ends on various interfaces (svi vlan, tunnel etc) and even using routing protocols not just static route... still nothing.

I hope you have understood by far that i want both ends seem like one network (no! i don't want my network to be extended)

As for easy vpn server <-> client i did also the same... still nothing but i'm not sure if the above scenario can work using this tecnique :/