Connecting 2 networks

kds_119

Distinguished
Dec 25, 2008
22
0
18,510
I'm looking to connect 2 networks that have the same IP's and subnet (192.168.0.XXX/24). I'm not looking to completely merge these 2, but I'm looking to setup a VPN for about 2-3 computers to run on SITE A's network and have access to SITE B's Server.

SITE A IP scheme is 192.168.0.XXX/24 and SITE B's is 192.168.0.XXX/24.

SITE A, the site the 2-3 computers will be on. SITE B, the site where the server will be.

My problem is SITE A has a DHCP server and a DATABASE server (the database server has the same IP as SITE B's server!?) I've not setup type of VPN for this connection to happen yet, I'm just looking at the best possible way for this to happen.

SITE A has an ASA 5505 on it and SITE B has an ASA 5510 on it. both sites have multiple site-to-site VPN's already setup on them so changing the privet IP scheme is not really a timely option.

I was woundering if there was a way to NAT SITE B's server to maybe something like 10.10.10.1 on the ASA 5510, but still be able to access it through it's normal IP (192.168.0.XXX) locally and through the other already setup VPN's.

If I can do it this way I can just static the 2-3 computer on SITE A's side and create a normal site-to-site VPN, but only allow them access to 10.10.10.1. Is there a way to do this or has anyone ever ran into this problem and has a fix for me?
 
I was woundering if there was a way to NAT SITE B's server to maybe something like 10.10.10.1 on the ASA 5510, but still be able to access it through it's normal IP (192.168.0.XXX) locally and through the other already setup VPN's.
Locally you can add IP address 10.10.10.1 to the server's Ethernet port and then add a route from site A to route all traffic to network 10.10.10.0/24 to the correct VPN gateway. But when a request comes in from a PC having IP address 192.186.0.x, where do you think the reply will go? For example, how will the server know that 192.168.0.x is not a local PC? If you really want to keep 192.168.0.0 at both sites (it just doesn't make sense to me), then use a different mask to make the networks unique, e.g. 192.168.0.0/25 and use the correct IP addresses at each location, e.g., less than 127 at site B and greater than 128 at site A.

Why not change the local network at site A from 192.168.0.0/24 to 192.168.1.0/24? That way you have full access to both networks and you only affect 2-3 computers.
 

kds_119

Distinguished
Dec 25, 2008
22
0
18,510
I know it does not make sense to keep both places the same, but I's kinda what I need to do :pfff:.... I'm glad you made the point about where the reply will go, I had not thought that through at the moment. I'm thinking I will insted try to do this another way... I think I will just haft to break down and change an IP scheme... ohh the boss aint gonna be happy... :sweat: I wish that he would have listened to me when I mentioned implementing site B with a different IP scheme