Site to Site VPN With PIX-506E

[sgozio]

Hi all,

I need to improve Public Network Site To Site VPN with two Pix-506e but LAN1 and LAN2 have the same Private Network Address:

192.168.1.0 255.255.255.0

Is possible to realize this VPN???

Tks all.

[Patrick Laidlaw]

Hello,

Unfortunatly you would have to do a double nat policy in order to get site to site vpn using the same addressing space. Your only other option is to use two routers to create a GRE tunnel and then bridge the tunnel.

I'm assuming since your using 506's that these sites are realitivly small meaning it would be very easy to readdress on of them. That is probably the best recomendation for the long term.

Patrick

[jackko]

it depends on the size of the network. sometimes it's easier to change one of the networks ip scheme. there is no easy way in terms of configuration without adding new devices.