topic Re: VPN between two sites using same subnet in Network Security

VPN between two sites using same subnet

dsr_deep1 — Tue, 12 Mar 2019 01:51:44 GMT

Hi there,

I am kind of new to firewalls, someone plz help, lets say my main office and branch office has same ip subnet ranges and i came to know that ipsec doesnot work in that situation. what am i supposed to do to make it work. do i have to configure some kind of natting or ?????? is there any alternative, plz kindly help.

VPN between two sites using same subnet

Jouni Forss — Fri, 31 May 2013 12:57:02 GMT

Hi,

Both sites should do NAT to their local networks before forwarding traffic to the L2L VPN between the sites.

Otherwise the traffic simply wont be forwarded correctly.

Configurations naturally depends on the devices and the software running on them.

- Jouni

VPN between two sites using same subnet

Karsten Iwen — Fri, 31 May 2013 12:59:53 GMT

And never forget the better solution if one site is really a more small branch-office: If you renumber the IP-addressing in that office you won't have this ongoing pain that double-NAT causes.

--
Don't stop after you've improved your network! Improve the world by lending money to the working poor:
http://www.kiva.org/invitedby/karsteni

VPN between two sites using same subnet

dsr_deep1 — Fri, 31 May 2013 13:11:53 GMT

Thanks for your quick reply. if am not worng we basically we use nat 0 with vpns to avoid packets being send to some other destination. am kind of confused now, what happens if we enable netting in this situation. lets say we have 172.168.4.0 subnet on both sites and we are using ASA 5520. if possible plz provide me some url link where this situation and configuration is explained properly, tried over internet but couldn't find good explanation.THNX

Re: VPN between two sites using same subnet

Jouni Forss — Fri, 31 May 2013 13:14:01 GMT

Hi,

Here is one

http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a0080b37d0b.shtml

It basicly gives you a configuration example with 2 ASA which have the same LAN networks.

Its does a Static Policy NAT on both sides and NATs the local network to some other similiar equal size network.

- Jouni

VPN between two sites using same subnet

dsr_deep1 — Fri, 31 May 2013 13:23:36 GMT

THNX

VPN between two sites using same subnet

Jouni Forss — Fri, 31 May 2013 13:25:28 GMT

Hi,

Remember to mark the reply as the correct answer if it answered your question.

Naturally if you need some help then ask away.

- Jouni