topic Re: How to set site to site VPN when the internal ip network address is same on both side in Firewall and Security Management https://community.checkpoint.com/t5/Firewall-and-Security-Management/How-to-set-site-to-site-VPN-when-the-internal-ip-network-address/m-p/177420#M32501 <P>When the same IPs exist on both sides of the VPN, the only way to resolve the issue is with static NAT.<BR />This implies:</P> <UL> <LI>Local encryption domain uses your IPs</LI> <LI>Remote encryption domain uses NAT IPs (must be different from local IPs)</LI> <LI>Remote End has relevant NAT rules</LI> </UL> <P>Depending on who needs to initiate VPN traffic, this may need to be done on both ends.</P> Wed, 05 Apr 2023 14:28:14 GMT PhoneBoy 2023-04-05T14:28:14Z How to set site to site VPN when the internal ip network address is same on both side https://community.checkpoint.com/t5/Firewall-and-Security-Management/How-to-set-site-to-site-VPN-when-the-internal-ip-network-address/m-p/177273#M32482 <P>Peers can you tell me How to set Site to Site VPN in the below Scenario</P><P>I did setup normal site to site VPN but when I am pinging Gen2 Console from Site-1 Console, I am getting, "Reply from 192.168.1.31, Destination host unreachable."</P><P>I also applied the static route between 181.43.23.32 and 181.43.23.41</P><P>as Set static-route default nexthop gateway address 181.43.23.41 on</P><P>&amp; Set static-route default nexthop gateway address 181.43.23.32 on , respective server and firewall, site 1 and gen2</P><P>&nbsp;</P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="Screenshot (297).png" style="width: 999px;"><img src="https://community.checkpoint.com/t5/image/serverpage/image-id/20401i11967B5C6CA61A33/image-size/large?v=v2&amp;px=999" role="button" title="Screenshot (297).png" alt="Screenshot (297).png" /></span></P> Tue, 04 Apr 2023 14:29:03 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/How-to-set-site-to-site-VPN-when-the-internal-ip-network-address/m-p/177273#M32482 Shinchan 2023-04-04T14:29:03Z Re: How to set site to site VPN when the internal ip network address is same on both side https://community.checkpoint.com/t5/Firewall-and-Security-Management/How-to-set-site-to-site-VPN-when-the-internal-ip-network-address/m-p/177420#M32501 <P>When the same IPs exist on both sides of the VPN, the only way to resolve the issue is with static NAT.<BR />This implies:</P> <UL> <LI>Local encryption domain uses your IPs</LI> <LI>Remote encryption domain uses NAT IPs (must be different from local IPs)</LI> <LI>Remote End has relevant NAT rules</LI> </UL> <P>Depending on who needs to initiate VPN traffic, this may need to be done on both ends.</P> Wed, 05 Apr 2023 14:28:14 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/How-to-set-site-to-site-VPN-when-the-internal-ip-network-address/m-p/177420#M32501 PhoneBoy 2023-04-05T14:28:14Z Re: How to set site to site VPN when the internal ip network address is same on both side https://community.checkpoint.com/t5/Firewall-and-Security-Management/How-to-set-site-to-site-VPN-when-the-internal-ip-network-address/m-p/178691#M32724 <P>Dear Shinchan&nbsp;</P><P>Did you sort the above case if you sort please share the solution i am eargly waiting to your message&nbsp;</P> Fri, 21 Apr 2023 08:41:34 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/How-to-set-site-to-site-VPN-when-the-internal-ip-network-address/m-p/178691#M32724 Doremon 2023-04-21T08:41:34Z Re: How to set site to site VPN when the internal ip network address is same on both side https://community.checkpoint.com/t5/Firewall-and-Security-Management/How-to-set-site-to-site-VPN-when-the-internal-ip-network-address/m-p/178692#M32725 <P>Solution is one of the following:</P> <P>- as <a href="https://community.checkpoint.com/t5/user/viewprofilepage/user-id/7">@PhoneBoy</a> suggested, use static NAT (easy for one tunnel, but will be more and more complicated with higher number of VPNs)</P> <P>- best solution: use different non-routable networks on each site, no need to use 192.168.1.x everywhere...</P> Fri, 21 Apr 2023 08:48:32 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/How-to-set-site-to-site-VPN-when-the-internal-ip-network-address/m-p/178692#M32725 G_W_Albrecht 2023-04-21T08:48:32Z Re: How to set site to site VPN when the internal ip network address is same on both side https://community.checkpoint.com/t5/Firewall-and-Security-Management/How-to-set-site-to-site-VPN-when-the-internal-ip-network-address/m-p/192394#M35560 <P>Hello,</P><P>Can you explain more about this. How to create static NAT</P> Tue, 12 Sep 2023 10:19:09 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/How-to-set-site-to-site-VPN-when-the-internal-ip-network-address/m-p/192394#M35560 Raj9 2023-09-12T10:19:09Z Re: How to set site to site VPN when the internal ip network address is same on both side https://community.checkpoint.com/t5/Firewall-and-Security-Management/How-to-set-site-to-site-VPN-when-the-internal-ip-network-address/m-p/192488#M35577 <P><A href="https://support.checkpoint.com/results/sk/sk30557" target="_blank" rel="noopener"><SPAN><STRONG></STRONG></SPAN></A><A href="https://sc1.checkpoint.com/documents/R81.10/WebAdminGuides/EN/CP_R81.10_SecurityManagement_AdminGuide/Topics-SECMG/Configuring-NAT-Policy.htm" target="_blank" rel="noopener">R81.10 Quantum Security Management Administration Guide - Configuring the NAT Policy</A></P> Wed, 13 Sep 2023 08:50:13 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/How-to-set-site-to-site-VPN-when-the-internal-ip-network-address/m-p/192488#M35577 G_W_Albrecht 2023-09-13T08:50:13Z