Use computer as relay to VPN connection

Therrm

Honorable
Aug 7, 2013
2
0
10,510
Dears,

I would like to know if it would be possible to:
- Have my LAN connected to the Internet
- Connect to a Cisco VPN server through the LAN Internet and redirect all Internet traffic through it
- Accept incoming connection from Wifi adaptater (incoming from the web)
- Incoming connections access to VPN network (Cisco) and its Internet

I have below configuration:
Connections%20setup.jpeg


Actually, I live in China and I have a special Cisco server running abroad. Therefore, I cannot connect directly to it with my phone/tablet (China limits a lot aborad VPN uses through 3G networks) but I can let my home computer connected to it 24h so I would like to connect to this computer and then access to the Internet through the Cisco server remotely to unblock all blocked websites.

I've tried bridges and shared connection but nothing seems to work properly...

Thanks for your help

Regards,

Therrm
 
Solution
That is a little strange but it depends what the subnet mask is on the VPN connection I guess. The ones I have configured are using more standard subnet masks.

If we ignore the VPN and would set the ICS up to share between the WIFI and the LAN. Traffic coming into the PC would be translated to 192.168.2.100 and then sent to the normal default gateway which is 192.168.2.1.

To make this work you need to make all the traffic appear to be coming from 192.18.128.1. It would then follow the routing rules the same as any other traffic. Likely there is a new default route being injected by the VPN that sends the traffic to 192.18.135.1

Issue the route print command form the command line with the vpn active and with it disabled and see...
Maybe it mostly depends on the VPN software configuration. The goal is to use ICS to share between the virtual adapter created by the VPN software and your wireless nic. Hard to provide exact guidance because there is a lot of variation in vpn clients.

So things to watch out for though. First VPN clients can be configured to prevent what is called split tunnel. This prevents you from using a second nic on the machine. The split tunnel setting many time controlled by the far end vpn appliance and cannot be changed. Next a lot of the VPN clients either load JAVA or activex. The virtual interface they create I cannot get ICS to even see and have not discovered why I can see it with most other tools but not with ICS. You are better off installing a VPN client that you manually start rather than one that is dynamically downloaded. These tend to appear in ICS where the activex ones do not.
 
Thanks Bill!
That's what I've tried to setup before but I think my problem of connection might come from the incoming connection IP address.
Here are all parties IP addresses:
- Wifi adaptator 192.168.0.1 (due to ICS)
- LAN adaptator 192.168.2.100
- Internet router 192.168.2.1
- VPN server 192.18.135.1
- VPN client 192.18.128.1

What should be the IP range I should setup the incoming connections in order to successfullly access the Internet through the VPN connection? I thought it would be the same as the VPN server, but it doesn't work. It actually doesn't work with any range mentionned above; nevertheless, if I know what is the right setup, I might be able to figure out what's the next blocking point.

Cya

Therrm
 
That is a little strange but it depends what the subnet mask is on the VPN connection I guess. The ones I have configured are using more standard subnet masks.

If we ignore the VPN and would set the ICS up to share between the WIFI and the LAN. Traffic coming into the PC would be translated to 192.168.2.100 and then sent to the normal default gateway which is 192.168.2.1.

To make this work you need to make all the traffic appear to be coming from 192.18.128.1. It would then follow the routing rules the same as any other traffic. Likely there is a new default route being injected by the VPN that sends the traffic to 192.18.135.1

Issue the route print command form the command line with the vpn active and with it disabled and see what the VPN is changing. Still the largest issue is going to be to get the ICS to translate the traffic to 192.18.128.1
 
Solution
Try portdefender.net. They have multiple channels both UDP and TCP. The TCP channels look like normal http and https destinations. You can get a 30 day free trail membership to see if it works for you.
 


portdefender.net offers 30 day free trail membership when faceless.me is just free. No need in registration. Download the software and run it. By the way, premium services have more competitive prices comparing with others and can be paid by card.
 


I prefer to use faceless.me - found it recently and I came to taste. At least worth exploring, and I don't find any better so far.
 


Do you guys not even read the posts. He wasn't asking for another VPN he was asking how he shares a vpn connection with a wireless port.

SO how do you share your great VPN software connection with another nic in the PC.

I suspect changing the VPN software is not a option anyway, few of the internet VPN providers use cisco. It is way too expensive to license, so this is likely being used on a corporate connection. It not like you can run your "free" vpn and replace a corporate remote vpn access.