ASA 5520 IPSEC vpn overlap

[r.arzouni]

Hi There,

We have multiple vpn tunnels coming to our cisco asa 5520 , the problem is that when we create another tunnel with the same network as another network on the firewall , it does not know how to route the traffic to which interface or sub interface.

How can we over come this , can you please help.

Thanks

R

[andrew.prince]

Search the forums for nat over IPSec, this question has been asked and answered many times

Sent from Cisco Technical Support iPad App

[Patrick0711]

Policy NAT on both ends of the tunnel or use public IP addresses on both ends. 

If your remote VPN subnet is the same as a local network on the firewall, the traffic will never get forwarded since a directly connected network route takes precedence over the default route.