TRBOnet LCP multi site system set up

[chasedradioman]

Hi Guys,
I work for a wireless internet service provider(WISP) and we have a 10 site TRBOnet LCP system which are interconnected with our own wireless links which all works fine, At the master site I have a Draytec Vigor 2862 Router which has a WAN IP of 10.20.0.11 and has port forwarding to the LAN of the master repeater, each site then has a MikroTik RB2011il-RM Router on it with WAN IP's on the same subnet as the WAN at the master (10.20.0.???/24).
I am trying to set up an extra Two sites to connect to the master but I am struggling with the setup of VPN's on three Draytec Vigor 2862 routers to work on the system?
The first extra site will be connecting via a 3G/4G dongle plugged into the USB on the first extra site and the second will be behind a customers domestic fibre broadband connection?
I have worked out and already installed One Draytec Router at the master site which has a static internet facing IP in it and the LAN side has been connected to the Wan side of the master router on 10.20.0.???/24.
Can anyone help me with the set up of the remote site routers to form a VPN back to the master?

Many thanks in advance

 

[N1GTL]

You cannot just VPN to the master. Each LCP site must be on its own subnet and each site must be able to independently connect to all other sites. Each repeater reports to the master and gets information about the peers. The peers then go out to other peers directly. It creates a "mesh" setup more than a "star".

 

[Firebuff880]

@chasedradioman

I agree with N1GTL and based on my use of the Draytec hardware in the somewhat distant past for VoIP Projects not even sure this will work, but maybe they have improved their solutions since then. . You will be dealing with TCP, UDP and Multicast traffic as well as some non-standard IP address routing.

You should get a copy of the MOTOTRBO System planning guide and read it.

You should get assistance from the dealer who sold the system, TRBONET or Motorola direct.

------

 

[Project25_MASTR]

Seems like you are over complicating things with the VPN (especially since you could just use EoIP tunnels with the Mikrotik's if need be).

While you could do this all on a flat network...it becomes a bit of a nightmare for management. Better off running each site in it's own subnet. Also bear in mind, some VPN services only tunnel TCP where everything link establishment on the TRBO line runs via UDP. If it were me, I'd use EoIP tunnels on the far ends where you don't have Layer 3 access to effecently get them to the master (as ports then won't have to be opened up in each firewall for the master to contact the individual repeaters.