topic Site to site VPN in Firewall and Security Management

Site to site VPN

chandrashekhar — Mon, 22 Apr 2024 07:25:50 GMT

Hi Everyone,

Can you help me how to implement Site to site VPN if Both sites have the same network? How to set routing and make end-to-end connection?

Re: Site to site VPN

PhoneBoy — Mon, 22 Apr 2024 14:45:43 GMT

Are both gateways managed by the same management?
In any case, you'll have to pick a subnet that does not overlap and which VPN peer will be performing the NAT.
Assuming the chosen subnet is only reachable through default route for your clients, there will be no additional routing changes needed.

Re: Site to site VPN

the_rock — Tue, 23 Apr 2024 01:19:03 GMT

You will need NAT in such a scenario, 100%. As Phoneboy said, routing when it comes to CP vpn is handled by the community itself, if you will, so you should not need an additional routes, unless its route based tunnel, then you need VTIs and all that, which you can use to route the traffic. If its just regular domain based tunnel, then not required.

Andy

Re: Site to site VPN

Lesley — Tue, 23 Apr 2024 07:16:39 GMT

Only thing I can add to above post is to make sure to put the NAT pool in the relevant encryption domains.