Possible to create IPsec VPN when two subnets are the same?

[Michael Klick]

Let's say we have two ASA 5505's on either side of a potential IPsec VPN.

But, we have two subnets that are the same, say: 192.168.0.0/24 on either side.

Is it possible to create a 3rd subnet in the (remote) 5505, like 192.168.15.0/24, terminate the IPsec VPN at it, then turn around and pass that traffic to the 192.168.0.0/24?

All to overcome that limitation?

Thanks,

[Akshay Rastogi]

Hi Michael,

IPsec tunnel could be created with overlapping subnets.

Please go through this link. It is having a sample configuration for the same scenario what you need :

http://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-next-generation-firewalls/112049-asa8x-vpn-olap-config-00.html

Hope it helps.

Regards,

Akshay Rastogi