I have an question about connecting two LANs (logically same LAN) over VPN. In picture below you can see overall representation of our implementation.

Description:

On each side of our distinct sites we have AAA servers (both servers share same base). We have 2 VLANs. For normal users (who can pass authentication) and guests.

Guest can only get to the Internet. Normal users can get to the Internet, and, if needed connect to co-workers at the other site.

So, an IPsec + NAT configuration should work well.

The main problem is outgoing IPsec packets from one router will be "stripped" on the site side of another router. How, in this situation, do we put this packet in VLAN 10 (for normal users) if we lose the VLAN tag information?

I hope i was clear in description of problem.

In short: How do we put packets, coming from IPsec, in VLAN 10 (for normal users), or is there any way to propagate a VLAN?

I have a question about connecting two LANs (logically same LAN) over a VPN. In picture below you can see overall representation of our implementation.

Description:

On each side, we have distinct sites with AAA servers (both servers share same base). We have 2 VLANs. For normal users (who can pass authentication) and guests.

Guests can only get to the Internet. Normal users can get to the Internet, and, if needed connect to co-workers at the other site.

So, an IPsec + NAT configuration should work well.

The main problem is outgoing IPsec packets from one router will be "stripped" on the site side of another router. How, in this situation, do we put this packet in VLAN 10 (for normal users) if we lose the VLAN tag information?

I hope I was clear in description of problem.

In short: How do we put packets, coming from IPsec, in VLAN 10 (for normal users), or is there any way to propagate a VLAN?

I have an question about connecting two LAN(logically same LAN) over VPN. In picture below you can see overall representation of our implementation.

Description: On each side of our distinct sites we have AAA server (both servers share same base). We have 2 vlan. For normal users (who can pass authentication) and guests. Guest can go to internet. Normal users can go to internet and if needed connect they co-workers on the distinct site.

So IPsec + NAT configuration should work well. But the main problem is: outgoing IPsec packets from one router will be "stripped" on the site side of another router. And how in this situation we should put this packet in vlan 10 (for normal users) if we lost vlan tag information.

I hope i was clear in description of problem. In short: How to put packets that coming from IPsec in vlan 10(for normal users). Or there is any way to propagate vlan? Thank you.

I have an question about connecting two LANs (logically same LAN) over VPN. In picture below you can see overall representation of our implementation.

Description:

On each side of our distinct sites we have AAA servers (both servers share same base). We have 2 VLANs. For normal users (who can pass authentication) and guests.

Guest can only get to the Internet. Normal users can get to the Internet, and, if needed connect to co-workers at the other site.

So, an IPsec + NAT configuration should work well.

The main problem is outgoing IPsec packets from one router will be "stripped" on the site side of another router. How, in this situation, do we put this packet in VLAN 10 (for normal users) if we lose the VLAN tag information?

I hope i was clear in description of problem.

In short: How do we put packets, coming from IPsec, in VLAN 10  (for normal users), or is there any way to propagate a VLAN?