Word :    Username :           
 

I'm looking to connect 2 networks that have the same IP's and subnet (192.168.0.XXX/24). I'm not looking to completely merge these 2, but I'm looking to setup a VPN for about 2-3 computers to run on SITE A's network and have access to SITE B's Server.

SITE A IP scheme is 192.168.0.XXX/24 and SITE B's is 192.168.0.XXX/24.

SITE A, the site the 2-3 computers will be on. SITE B, the site where the server will be.

My problem is SITE A has a DHCP server and a DATABASE server (the database server has the same IP as SITE B's server!?) I've not setup type of VPN for this connection to happen yet, I'm just looking at the best possible way for this to happen.

SITE A has an ASA 5505 on it and SITE B has an ASA 5510 on it. both sites have multiple site-to-site VPN's already setup on them so changing the privet IP scheme is not really a timely option.

I was woundering if there was a way to NAT SITE B's server to maybe something like 10.10.10.1 on the ASA 5510, but still be able to access it through it's normal IP (192.168.0.XXX) locally and through the other already setup VPN's.

If I can do it this way I can just static the 2-3 computer on SITE A's side and create a normal site-to-site VPN, but only allow them access to 10.10.10.1. Is there a way to do this or has anyone ever ran into this problem and has a fix for me?

Sponsored Links
Register or log in to remove.

Quote :

I was woundering if there was a way to NAT SITE B's server to maybe something like 10.10.10.1 on the ASA 5510, but still be able to access it through it's normal IP (192.168.0.XXX) locally and through the other already setup VPN's.

Locally you can add IP address 10.10.10.1 to the server's Ethernet port and then add a route from site A to route all traffic to network 10.10.10.0/24 to the correct VPN gateway. But when a request comes in from a PC having IP address 192.186.0.x, where do you think the reply will go? For example, how will the server know that 192.168.0.x is not a local PC? If you really want to keep 192.168.0.0 at both sites (it just doesn't make sense to me), then use a different mask to make the networks unique, e.g. 192.168.0.0/25 and use the correct IP addresses at each location, e.g., less than 127 at site B and greater than 128 at site A.

Why not change the local network at site A from 192.168.0.0/24 to 192.168.1.0/24? That way you have full access to both networks and you only affect 2-3 computers.

Reply to GhislainG

I know it does not make sense to keep both places the same, but I's kinda what I need to do :pfff:.... I'm glad you made the point about where the reply will go, I had not thought that through at the moment. I'm thinking I will insted try to do this another way... I think I will just haft to break down and change an IP scheme... ohh the boss aint gonna be happy... :sweat: I wish that he would have listened to me when I mentioned implementing site B with a different IP scheme

Reply to kds_119

Since your boss obviously doesn't know much about networking, why did you listen to him?

Reply to GhislainG

he the I.T. administrator...

Reply to kds_119

also, I think I've found a way to do it... through using NAT, I'll keep ya posted.

Reply to kds_119

You already use NAT.

Reply to GhislainG
Tom's Hardware > Forum > General Networking > General Gateways, Routers and Firewalls > Connecting 2 networks
Go to:

There are 654 identified and unidentified users. To see the list of identified users, Click here.

Sponsored links
  • Ask the community now
  • Publish
Ad
They won a badge
Join us in greeting them