FVS318 to FVS318 VPN - Both behind NAT routers with Static IPs

[ahspao]

I'm attemtping to make a device to device (have a pair of FVS318v3) VPN connection and I don't know if these units are capable of this sort of thing from behind standard "off-she-shelf" consumer grade routers, with NAT enabled.

-Site A has a static IP on the router and everything behind it is Private Address

-Site B has a static IP on the router and everything behind it is Private Address (as well).

Can I put the FVS318's behind these routers without giving the FVS318's a real WAN IP and make a VPN connection? I attempted it (thinking it should be straighforward) but I ended up with a mess and confused myself in the process.

If there is some sort of document or explanation of how this would work, I would really appreciate a point in the right direction. If this is not possible, i'm open to alternative solutions !

Thanks for any help you guys can spare.

[adit]

No, you need public WAN IP's on the VPN routers.

[jmizoguchi]

Once you can put BOTH router with public IP then you can look my case study for setups

[ahspao]

I was afraid of that...thanks for the info guys.

[Daedalus01]

Your setup is also a Double NAT scenario. A NAT device giving a NAT address to a device giving out NAT addresses to other devices. This can cause some things to not function properly. This is also why a VPN tunnel will not work in your case.

[kiertzner]

Hi

Yes you should be able to do that. FVS318v3 should be NAT-T enabled.

I have setups with FVS318v3 private WAN ip, i.e. 192.168.1.2, connecting to a FVS336Gv1 with public WAN ip.

Some of the FVS318v3 is also behind a ISP router with dynamic ip.

[jmizoguchi]

You will usually only get one direction