topic Re: VPN Overlaped in Firewall and Security Management

VPN Overlaped

MardoqueoRob — Thu, 10 Dec 2020 00:05:38 GMT

Hello friends

Has anyone ever done a site-to-site VPN with overlapping networks

GW-A
Public IP: 1.1.1.1
encryption domain:
192.168.2.0/24
192.168.3.0/24

GW-B
Public IP:1.1.1.2

Encription domain:
192.168.3.0/25

or some method to do it in CHeck Point, it is worth mentioning that the two GW have SO Gaia r80.40 and managed by a single Management

I really appreciate your help checkpoint teachers.

firewall1-gx — Thu, 10 Dec 2020 01:51:23 GMT

Hi Robl,

Overlap is bad when we talk about vpn., it's like ip or networks duplicated in your local network.

My consideration is perform NAT to change network or ask your vpn partner to change network him.

Warm Regards,

Alisson Lima

_Val_ — Thu, 10 Dec 2020 08:37:48 GMT

You need to NAT the overlapping part on one of the sites for this to work

MardoqueoRob — Thu, 10 Dec 2020 14:37:06 GMT

Hi _Val_, Any SK to follow the settings? Thank you

_Val_ — Thu, 10 Dec 2020 14:42:29 GMT

Not as I am aware of

G_W_Albrecht — Thu, 10 Dec 2020 15:49:16 GMT

Better change one network ! Without NAT this could run much smoother 8)!

MardoqueoRob — Thu, 10 Dec 2020 20:44:17 GMT

I found this sk170812 but it does not come with details of how to do it, the VTI VPN I already have it working but without overlap