ASA IPSec S2S "overlapping"

[Patrik Nechajev]

Hello,

just fast question. We have multiple customers behind our ASA cluster connected via S2S IPsec. Each customer has its subinterface/VLAN/own network.
Till now none of our customer had same remote networks in S2S. However time has come and one of our customers is changing its remote network to new one which is overlapping with another customer.
Will this scenario cause any issues?

Customer A vlan 10: Network behind ASA 10.0.0.0/24 Remote subnet in S2S 192.168.1.0/24
Customer B vlan 11:  Network behind ASA 10.0.1.0/24 Remote subnet in S2S 192.168.1.0/24

Will this cause any issues? I think it should work without any problem since those are two separated networks, am i right?

Thank you.

[Rob Ingram]

Hi @Patrik Nechajev should be ok as the source networks are different, so interesting traffic would match the different crypto ACL and routed via the different tunnels.

[Patrik Nechajev]

Hello Rob, 
great, thanks!

[MHM Cisco World]

Network behind ASA 10.0.0.0/24
Network behind ASA 10.0.1.0/24
separate no issue at all.  

[MHM Cisco World]

overlapping between subnet ?
This can only happened if you use in one of ACL of VPN 10.0.0.0/8 instead of 10.0.0.0/24