Two routers on same fiber?

[ALSI TRADER]

Thank you for all who helped on the thread Ping to Germany/Europe | Internet & Networks

In further talks with people in Europe we can to possible solution.

I make an "embassy" in my office with PC that is connected to network in Europe.

What I will need is static IP, I see Telkom is selling one for R45 per month. I'm on Openserve fiber with Telkom as provider (since it is in estate)

I will need another router that that they will have access to and will not have any other connections than one from my office to their office.

Is there any way you can connect to routers on same network terminator or fiber?

Please help

 

[ThatGuy_ZA]

Generally you cannot have multiple routers on the same fibre line.

Can't you just ask them to install the VPN client on your computer?

 

[ALSI TRADER]

Generally you cannot have multiple routers on the same fibre line.

Can't you just ask them to install the VPN client on your computer?

That is how is done now but problem is there are 2 VPN connections to get to their office.

If I ping office directly I get 180ms, as I connect on 2 VPNs i get 260ms and that becomes too slow.

 

[Areola Grande]

Can you not get the router to establish one of the VPNs, then use Windows to establish the second one?

 

[ALSI TRADER]

Can you not get the router to establish one of the VPNs, then use Windows to establish the second one?

Thank you for your input

Moment I connect to first VPN I connect to their network with remote access and have no other option just to follow what they specified
Solution with static IP and router locked to them is suggested by their IT they think that is the best way.

 

[Areola Grande]

I don't fully understand what the two routers would accomplish if I'm honest. You would only be routing traffic through one of them at a time unless you did some wild port-forwarding or something.

Or do you want two routers so you can use one for your normal browsing and the other for work stuff?

 

[mikewazar]

Why do you need a static IP if you're connecting to their network?

Also; an A record on a cheapie domain will be much quicker, as you'd only need to update the A record when IP changes which can be done via a scheduled script on pretty much any OS.

The only reason you'd need a static IP is for business use outbound, such as sending mail which is just silly.

 

[mikewazar]

But to answer your specific question; maybe.

Some Openserve port allocations (pre 2017ish?) allow for multiple PPPoE sessions but you need to test that to know whether yours will be. For example my (years old) installation on Openserve allows me to dial multiple PPPoE sessions via different ISPs but I know some newer installs will flap between the two and cause hell.

 

[mikewazar]

Also, what VPN? IPSec or similar? Some (like Wireguard) don't care about ports or IPs or anything, and will allow traffic exchange via private/public key authentication as long as at least one (yours or the company's) server has that port accessible.

 

[mikewazar]

Quick fix: sign up for another cheap Openserve service and have Openserve activate another port on your ONT and use that with a dedicated router/network for the European connection.

 

[ALSI TRADER]

Or do you want two routers so you can use one for your normal browsing and the other for work stuff?

Sorry yes that is exactly reason. Since I need internet for kids etc while I'm working

 

[ALSI TRADER]

Quick fix: sign up for another cheap Openserve service and have Openserve activate another port on your ONT and use that with a dedicated router/network for the European connection.

Cool didn't know that can be done.

Thanks

 

[Areola Grande]

Sorry yes that is exactly reason. Since I need internet for kids etc while I'm working

Depending on your router, could you not use some sort of port forwarding scenario.

Setup a VPN on the router and port forward all traffic from LAN Port 1 to use it. Connect your PC to LAN Port 1.

That way all traffic from you goes via VPN, but all other traffic just works as normal.

 

[froggeh]

The type of VPN is going to determine the type of router required. Essentially what you're able to do, however, is get a singe router (Mikrotik is probably going to be easiest) and setup a connection to the VPN server via a client interface. Custom routes can then be used to determine whether traffic should be routed via open WAN connection or the VPN client interface.

 

[ALSI TRADER]

Depending on your router, could you not use some sort of port forwarding scenario.

Setup a VPN on the router and port forward all traffic from LAN Port 1 to use it. Connect your PC to LAN Port 1.

That way all traffic from you goes via VPN, but all other traffic just works as normal.

They setup laptop their side with all necessary software and than they ship it here. So I can't change anything on that hardware

Sorry if I missed that part in the first post.

 

[ThatGuy_ZA]

I assume the company want a static IP so they can whitelist it.

OP, have a look at either a mini pc to run pfSense or a Mikrotik router. I'd setup two VLAN's, each broadcasting on separate SSID's for ease of switching.

The first VLAN (1) will be your current network and then the second VLAN (I'd use something like 10) can be the one that routes through the corporate network.

A basic Mikrotik router plus Ubiquiti Unifi AP should sort you out.

 

[ALSI TRADER]

I assume the company want a static IP so they can whitelist it.

OP, have a look at either a mini pc to run pfSense or a Mikrotik router. I'd setup two VLAN's, each broadcasting on separate SSID's for ease of switching.

The first VLAN (1) will be your current network and then the second VLAN (I'd use something like 10) can be the one that routes through the corporate network.

A basic Mikrotik router plus Ubiquiti Unifi AP should sort you out.

Yes they want to white list IP

I thing I have mirco tek router that was given to me when I was with VOX telkom fiber.

 

[WiZard]

@ALSI TRADER can you please describe you EXACT current setup - Starting with the fibre, device by device, so that we can stop speculating?

 

[mikewazar]

Yes they want to white list IP

I thing I have mirco tek router that was given to me when I was with VOX telkom fiber.

If this is the case and there is no alternative you can order a static IP from some Openserve ISPs that will involve some setup on your end.

I wasn't sure if your thread was asking about bandwidth aggregation, gaming NAT, remote office VPN or running two ISPs on one fibre line... but all the best.

 

[ALSI TRADER]

@ALSI TRADER can you please describe you EXACT current setup - Starting with the fibre, device by device, so that we can stop speculating?

Current setup is with 2 VPN connections on Openserve/Telkom fiber 100/50 and it is too slow

IT from the other company suggested following:
Setup 1
They setup PC/Laptop with all that I need.
I have to provide static IP.
That PC will be connected to network in Europe and no internet will be allowed on it. They will have access to router as well.
So that will be setup 1.

Setup 2:
Rest of the PCs and WIFI should work as it now

So I should rather ask how can I do this.

One option from @mikewazar was to get another internet connection to the other ports and setup that as work

 

[mikewazar]

Please elaborate on how 100/50Mbps is too slow? Are you legitimately saturating your line during work?

 

[ALSI TRADER]

Please elaborate on how 100/50Mbps is too slow? Are you legitimately saturating your line during work?

On current setup I have to connect to VPN1 than to remote deskotop than to VPN2 than to servers where I should work
So ping is around 250-260ms

With new setup
I would connect directly to servers where I should work and ping will be around 180ms and that is way better.

So internet is not too slow, delay is way to big.

Working up to 200ms is ok above that it becomes pain

 

[mikewazar]

On current setup I have to connect to VPN1 than to remote deskotop than to VPN2 than to servers where I should work
So ping is around 250-260ms

With new setup
I would connect directly to servers where I should work and ping will be around 180ms and that is way better.

So internet is not too slow, delay is way to big.

Working up to 200ms is ok above that it becomes pain

Okay let's break this down:

Why are you connecting via VPN1 then RDP, then VPN2 then servers? Company policy?

Latency to your VPN1 hop would be what you need to eliminate. Where are you in SA? Maybe accessing a closer VPN would solve your issues from the root?

 

[WiZard]

@ALSI TRADER can you please describe you EXACT current setup - Starting with the fibre, device by device, so that we can stop speculating?

Current setup is with 2 VPN connections on Openserve/Telkom fiber 100/50 and it is too slow

Let me give an example: (my current setup)
Fibre patch point
Yellow fibre patch cable to ONT (ONT in this case is a wifi router provided by Telkom that has been neutered so that only the ONT function works)
Ethernet patch cable to WiFi router's WAN port (WiFi router makes PPPoE connection to internet using VOX account)
Ethernet cables to PCs from WiFi router's LAN ports (WiFi router acts as NAT and DHCP)

How does your setup differ from this?

 

[ALSI TRADER]

Okay let's break this down:

Why are you connecting via VPN1 then RDP, then VPN2 then servers? Company policy?

Latency to your VPN1 hop would be what you need to eliminate. Where are you in SA? Maybe accessing a closer VPN would solve your issues from the root?

Yes company policy, they don't want to change that. I spoke with IT guy he said with VPN1 I connect to one office to RDP than I was connected to other office with VPN2 and than again to UNIX servers. He understand is it totally crazy to do it that way but that is their policy. And to change that will take years if ever.


Pretoria east. And I have to use global protect VPN in both cases.

Guy from IT suggested option with PC that I explained above.

 

[ALSI TRADER]

Let me give an example: (my current setup)
Fibre patch point
Yellow fibre patch cable to ONT (ONT in this case is a wifi router provided by Telkom that has been neutered so that only the ONT function works)
Ethernet patch cable to WiFi router's WAN port (WiFi router makes PPPoE connection to internet using VOX account)
Ethernet cables to PCs from WiFi router's LAN ports (WiFi router acts as NAT and DHCP)

How does your setup differ from this?

Same
ONT with fiber
Ethernet cable from ONT to Synology router
From Synolgoy router connected to PCs and WIFI goes from there

 

[mikewazar]

Okay tough situation but quickest and potentially cheapest option is get a second fibre line (even 10Mbps will be fine for RDP which is just a 1080p HD stream) with fibre latency on an ISP that sells static IPs and be done with it

 

[ALSI TRADER]

Okay tough situation but quickest and potentially cheapest option is get a second fibre line (even 10Mbps will be fine for RDP which is just a 1080p HD stream) with fibre latency on an ISP that sells static IPs and be done with it

Thank you

It must be Telkom since they are ISP in estate. They sell IP for R45 pm

 

[mikewazar]

Thank you

It must be Telkom since they are ISP in estate. They sell IP for R45 pm

Axxess (basically Afrihost, and uses SAIX [Telkom] for transit) offer for R39/pm

 

[mikewazar]

Telkom customer support is bad, Axxess isn't the best but it's miles better than dealing with Telkom.