Cisco AnyConnect Same Subnet

[mes]

Hi

We wan't to use our ASA 5510 for remote VPN access using Cisco anyconnect.

Our network looks like this:

As you can see the company network is using 192.168.1.0/24, which is also commonly used by home routers.

My question is:

Given that a user's home network is also 192.168.1.0/24, is it possible to configure the ASA to allow Cisco anyconnect client connect to the company network and access the 3 shown servers, even though both the company network and the home network is using the same subnet?

I was thinking that it might be possible if the VPN IP Pool was using a total seperat pool of addresses like 172.20.1.0/24 but I'm not 100% sure.

[Yudong Wu]

Yes, IP pool should be in a separate network.

I think you must use split-tunnel for those server IPs so that a related route entry will be added in client PC's routing table which point to the tunnel. Otherwise, client PC will use the existing local network entry in the routing table and thinks the server is local connected.