Our campus has NAT setup at each hostel, and the gateways of all hostels are connected via a Layer 3 Switch.
The ip configuration of clients of hostel 1 is 22.214.171.124, gateway 126.96.36.199 and that of hostel 2 is 188.8.131.52, gateway 184.108.40.206 (these are given by a dhcp server running on gateway servers).
The gateways of hostels have dual NIC. Gateway of server 1 has ip configuration:
- NIC 1 (for internal network): ip: 220.127.116.11
- NIC 2: (for central network/internet) ip:192.168.201.200, gateway 192.168.201.254
Gateway of server 2 has ip configuration:
- NIC 1 (for internal network): ip: 18.104.22.168
- NIC 2: (for central network/internet) ip: 192.168.206.200, gateway 192.168.206.254
The 192.168 lines of all gateways are connected via optical fiber line to a central switch (it provides a trunk line)
Now as it must be clear that a client of hostel 1 can't connect to client of hostel 2 because of NAT. Is there anything i can do on gateways/clients etc. anywhere so that this is possible. I have tried various approaches like ipsec etc. I know a central vpn server can do this but i dont have a server or LAn that can handle such a drastic load ( total capacity of all hostels is 7000). Can anyone suggest the best way of doing this. I have complete access to gateways and clients but not on the central switch.
P.S.: I am student at this institute given the responsibilty to perform the above task but i cant distort the current structure completely. I can run something atop it that doesnt interfere with the current address and their routing.
This is an image of the network structure i have (just an e.g.) http://i26.tinypic.com/10hw1oh.jpg