https://community.checkpoint.com/t5/Firewall-and-Security-Management/VPN-same-subnets/m-p/58943#M12506 <P>Hi,</P><P>This is my first post. I am quite new to Checkpoint.</P><P>I need to connect a CISCO 800 series appliance to an Checkpoint appliance R77.30.</P><P>This CP has already some IPSec VPN with other partners. For my connection from the CISCO appliance, I need to declare several local subnets, and one of them (192.168.1.0/24) is already declared in an other VPN IPSec. I got a warning during Policy Installation, and this subnet is not linked/attached to the group involved in my CP VPN.</P><P>All VPN declarations in this CP have been done by a previous administrator and are quite basic, so no advanced options has been done.</P><P>So, is there a solution to have this subnet attached to my VPN ?</P><P>And second problem, but of minor importance : this CISCO appliance has 2 WAN links, with 2 ISP, for failover. Is there a way to declare, on CP side, these 2 peers on same VPN ? Or create 2 VPN, one for each situation, but in this case, I anticipate I'll get the same problem as the first one : subnet declared twice.</P> Thu, 25 Jul 2019 08:14:02 GMT sylvain31 2019-07-25T08:14:02Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/VPN-same-subnets/m-p/58943#M12506 <P>Hi,</P><P>This is my first post. I am quite new to Checkpoint.</P><P>I need to connect a CISCO 800 series appliance to an Checkpoint appliance R77.30.</P><P>This CP has already some IPSec VPN with other partners. For my connection from the CISCO appliance, I need to declare several local subnets, and one of them (192.168.1.0/24) is already declared in an other VPN IPSec. I got a warning during Policy Installation, and this subnet is not linked/attached to the group involved in my CP VPN.</P><P>All VPN declarations in this CP have been done by a previous administrator and are quite basic, so no advanced options has been done.</P><P>So, is there a solution to have this subnet attached to my VPN ?</P><P>And second problem, but of minor importance : this CISCO appliance has 2 WAN links, with 2 ISP, for failover. Is there a way to declare, on CP side, these 2 peers on same VPN ? Or create 2 VPN, one for each situation, but in this case, I anticipate I'll get the same problem as the first one : subnet declared twice.</P> Thu, 25 Jul 2019 08:14:02 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/VPN-same-subnets/m-p/58943#M12506 sylvain31 2019-07-25T08:14:02Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/VPN-same-subnets/m-p/58998#M12507 Am I understanding correctly you are using the same subnet in two or more site to site VPNS? Fri, 26 Jul 2019 02:05:40 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/VPN-same-subnets/m-p/58998#M12507 PhoneBoy 2019-07-26T02:05:40Z