VPN over Vumatel

[Herr_SturmGeist]

Since I'm lucky enough to have Vumatel install fibre at both my home and my office I've been wondering if there are any providers that give a local (national) only connection over which one can establish a VPN between two fibre locations on Vumatel's network. Since it's all ethernet based couldn't it even just be VLANs? Anyone have any insights?

 

[MrDraytek]

DrayTek VPNs

Since I'm lucky enough to have Vumatel install fibre at both my home and my office I've been wondering if there are any providers that give a local (national) only connection over which one can establish a VPN between two fibre locations on Vumatel's network. Since it's all ethernet based couldn't it even just be VLANs? Anyone have any insights?

Hi there,

Sure you can have a VPN and you can actually manage it yourself using your own routers.
Our DrayTek Vigor2925 series would be perfect on either side of the fibre connection - one acting as the VPN server at your office and the other as the VPN client at home. Both LANs would then effectively be joined, with traffic routing seamlessly and securely over the VPN , as if it were all one big LAN (or with only selective routing according to your own custom rules, called Route Policies).

The DrayTek router would link into your Vumatel fibre CPE via one of its two ethernet WAN ports.. pretty easy setup for anyone familiar with a router WebUI.

Check out a live web demo of the DrayTek Vigor2925 router's webUI over here. The feature you're looking for is under "VPN and Remote Access">>"LAN to LAN" and you would create a profile in there: http://eu.draytek.com:12925/

Let me know if that sounds good and I can DM you more info.

 

[Genisys]

Since I'm lucky enough to have Vumatel install fibre at both my home and my office I've been wondering if there are any providers that give a local (national) only connection over which one can establish a VPN between two fibre locations on Vumatel's network. Since it's all ethernet based couldn't it even just be VLANs? Anyone have any insights?

Why not set up a tunnel between the two locations? I've set up a tunnel between two locations easily using pfsense on both ends. Should be able to set up a tunnel with two Mikrotik routers as well. The best solution for this is an ipsec tunnel. Just make sure you don't route all of your traffic over the tunnel.

 

[Necropolis]

Do both sites have static IP Addresses?

If so: drop a router of some description at each end and configure them.

A DIY solution is going to be a lot cheaper.

 

[Herr_SturmGeist]

You aren't quite grokking what I mean, I currently run a VPN over my old Telkom line at home to my office. So let me try and explain better.

I don't want Internet from the connection at my home, I just want to be able to establish a connection to my office. I want to access my office resources at 100mbps or 1gbps but I don't want the expense of paying for that amount of pure Internet connectivity at both locations.

Since it should be as simple as assigning a VLAN to devices connected to the CPE at both sites I should then be able to establish a connection between the sites and secure it as I wish while using minimal, if any, third-party back haul (I'm not sure what Vumatel's network topology looks like between suburbs). Surely someone caters to something like this over Vumatel's fibre?

 

[Sinbad]

You aren't quite grokking what I mean, I currently run a VPN over my old Telkom line at home to my office. So let me try and explain better.

I don't want Internet from the connection at my home, I just want to be able to establish a connection to my office. I want to access my office resources at 100mbps or 1gbps but I don't want the expense of paying for that amount of pure Internet connectivity at both locations.

Since it should be as simple as assigning a VLAN to devices connected to the CPE at both sites I should then be able to establish a connection between the sites and secure it as I wish while using minimal, if any, third-party back haul (I'm not sure what Vumatel's network topology looks like between suburbs). Surely someone caters to something like this over Vumatel's fibre?

I get what you're saying

Technically it should be possible, but commercially, I don't know if Vumatel are set up for this type of thing...

 

[Necropolis]

You aren't quite grokking what I mean, I currently run a VPN over my old Telkom line at home to my office. So let me try and explain better.

I don't want Internet from the connection at my home, I just want to be able to establish a connection to my office. I want to access my office resources at 100mbps or 1gbps but I don't want the expense of paying for that amount of pure Internet connectivity at both locations.

Since it should be as simple as assigning a VLAN to devices connected to the CPE at both sites I should then be able to establish a connection between the sites and secure it as I wish while using minimal, if any, third-party back haul (I'm not sure what Vumatel's network topology looks like between suburbs). Surely someone caters to something like this over Vumatel's fibre?

Have you spoken to Vumatel?

A previous company I worked for did something similar via Neotel.

 

[Herr_SturmGeist]

I get what you're saying

Technically it should be possible, but commercially, I don't know if Vumatel are set up for this type of thing...

Don't see why not, ISPs already pay to use their network, it would just be a bit of routing setup from their side and just charge me for using the local network. It is ostensibly open access after all.

Have you spoken to Vumatel?

A previous company I worked for did something similar via Neotel.

I'm phoning them today, just wanted to see if someone else has already tried it.

Telkom and Neotel metro fibre are pretty much made for this, you usually have to pay extra for using an international gateway on their networks, don't know if that has changed since I looked a long time ago.

 

[PBCool]

Don't see why not, ISPs already pay to use their network, it would just be a bit of routing setup from their side and just charge me for using the local network. It is ostensibly open access after all.



I'm phoning them today, just wanted to see if someone else has already tried it.

Telkom and Neotel metro fibre are pretty much made for this, you usually have to pay extra for using an international gateway on their networks, don't know if that has changed since I looked a long time ago.

I can give some insight here, basically the answer is no. Vumatel has the ability to do this but wont deal with end users directly. Also their consumer lines currently are limited to 1000/100 (1Gbps Down, 100Mbps Up) so the most you could get from a tunnel or capacity perspective is 100Mbps.

Any ISP can probably do this but the setup is a bit complicated due to the nature of the Vumatel system, but essentially we would need to assign a non public routeable IP range to your home (and then just charge a "Line" fee), you would then still need to IP tunnel to your Internet service at the office. To do all of this is quite a workaround and is quite a thing for your ISP which generally doesn't make it feasible to support .

That being said if you had a home and business account with us we would probably try and make a plan.

 

[Herr_SturmGeist]

I can give some insight here, basically the answer is no. Vumatel has the ability to do this but wont deal with end users directly. Also their consumer lines currently are limited to 1000/100 (1Gbps Down, 100Mbps Up) so the most you could get from a tunnel or capacity perspective is 100Mbps.

Any ISP can probably do this but the setup is a bit complicated due to the nature of the Vumatel system, but essentially we would need to assign a non public routeable IP range to your home (and then just charge a "Line" fee), you would then still need to IP tunnel to your Internet service at the office. To do all of this is quite a workaround and is quite a thing for your ISP which generally doesn't make it feasible to support .

That being said if you had a home and business account with us we would probably try and make a plan.

Well I guess I am in luck then. I'm using you guys at my office, and am planning to do the same at home as soon as Vumatel does my home installation, so who do I need to talk to?

 

[PBCool]

Well I guess I am in luck then. I'm using you guys at my office, and am planning to do the same at home as soon as Vumatel does my home installation, so who do I need to talk to?

Cool, drop me a mail on paul at cisp.co.za and I can see what we can do .