Successful S2S connection without access to internal network

Edues · 2022-09-15T19:11:19.738Z

I have connected two Opal Routers, one in my office and the other in my home.
I have successfully configured GoodCloud and they have connected via S2S without errors.

My Opals are connected through the “Wan” port to a port on my residential Routers.

S2S works, but I have no access to my equipment between the two sites, I don’t know much about networking, I guess there is no communication between Wan and the internal network.

Have I connected my equipment correctly?

Regards
Edu

yuxin.zou · 2022-09-16T06:48:20.290Z

You need add your local network (such as 192.168.8.0/24) to site to site.

lQLPJxaw40DqinHNAmjNAiewW2ttkXnrtswDIuEO2IB5AA_551_616551×616 17.2 KB

Edues · 2022-09-16T08:14:22.064Z

Thanks, but when I add my network (192.168.0.0/24) I get this warning:

lan0aviso1084×188 8.76 KB

Edues · 2022-09-16T08:31:52.319Z

I am not a good draftsman, I hope you understand this:

s2s2194×1068 101 KB

yuxin.zou · 2022-09-16T08:51:07.831Z

You need add LAN to S2S.
From this diagram, you should add 192.168.8.0/24.

If you want to access the device on the wan side of the gateway, such as 192.168.0.23, you need to configure the firewall and routing rules manually in the router backend. It’s very complicated. I recommend that you put the device you want to access into the Opal’s LAN.

Edues · 2022-09-16T09:08:14.070Z

the network 192.168.8.0/24 was already added by default.

lan8788×810 27.1 KB

My goal is to work at home as if I were in the office, maybe this is too much, but changing the network of the whole office system is not a viable option for now, besides I think that if I did this, the Opal would acquire the ip 192.168.8.x in WAN, and the problem would be the same, only with another IP. Please correct me if I am wrong, thanks.

can you direct me somewhere that explains the rules to add in the Firewall?

funfun · 2022-09-16T09:45:17.618Z

I believe the fact that your both WANs are 192.168.0.0/24 is going to complicate / make things impossible. Can you move your home network to something else like 192.168.133.0/24?

Edues · 2022-09-16T10:11:06.447Z

Thanks funfun

if I do this, the equipment from both sites will not meet,
right?

yuxin.zou · 2022-09-16T10:30:11.896Z

Is your client connected under Opal or under the main router?

If it connected under Opal, you only need change any 192.168.0.0/24 to other. Then add 192.168.0.0/24 to S2S.
If it connected under main router, you need set route rule in you main router. such as you want access 192.168.0.23 in “Home” from “Office”, you need add route rule in office main router.

funfun · 2022-09-16T10:38:40.265Z

It seems like you set up everything so that network adresses and masks on both sides match. This is NOT how you are supposed to do it. It is much much better if nothing matches, they are all different networks and it is easier if they also have different addresses / masks.

yuxin.zou · 2022-09-16T10:39:27.801Z

If your client connected under Opal, set your home network is 192.168.1.0/24.
You can add 192.168.1.0/24 to your Office’s Opal in S2S, and add 192.168.0.0/24 to your Home’s Opal in S2S. Then you should can use the client access target in another network.

Edues · 2022-09-16T10:39:50.589Z

The Clients are connected under the main router, I just added the Opal to a free port on the router…

I’m going to try adding a route on the main router, I will not be able to do it immediately.

I will tell you later how it went,
thanks to all.