Netscreen VPN

Archived from groups: comp.security.firewalls (More info?)

In article <u5WFc.642$Nh3.127@newsfe3-win.ntli.net>, msjnicholson
{REMOVESPAM}@msn.co.uk says...
> Dear All,
> I would like to confirm something, 2 networks withe the same IP subntes,
> 1.The company network (192.168.1.0/24, with netscreen and ouside range of
> 213.168.X.X, connected to the internet via 2MB pipe, small remote network
> (wireless) with same 192.168.1.0/24 range, connected to the internet via
> DSL,
> Laptop on this remote network with 192.168.1.x ip, running netscreen remote
> client, trying to connect to mailserver 192.168.1.y (not nat'd) on the
> company network and won't- I say this is because they are on same network
> and how does it know to route traffic over the VPN, I want to nat the mail
> server to an address in 213.168.x.x range and then I think it will work, i
> am the only IT bloke without a degree so I get shot down every time (quite
> spitefully). can anyone confirm this or tell me I am wrong.

In general you have two problems:

1) Both networks are using a common subnet - you should not be using
192.168.0.0/24 nor 192.168.1.0/24 for anything.

2) Both networks are in the same address space - how is a machine in
network 1 suppose to know if 192.168.1.1 is remote or local?

Try 192.168.8.0/24 for the first one and 192.168.16.0/24 for the second
one and it should work.

--
--
spamfree999@rrohio.com
(Remove 999 to reply to me)