Placing office mode net into fw vpn domain

[the_rock]

Hey guys,

I had a customer ask me about this, but I think its a really bad idea. They want to put default office mode net 172.16.10.0/24 into vpn enc domain due to couple of remote sites wanting to access some IPs in that range, but I have a feeling that may actually end up breaking lots of stuff.

Anyone ever attempted to do this and if so, what was the experience?

Andy

[RS_Daniel]

Hello,

I have a couple customers which include office mode networks on its Site-to-Site encryption domains, no problem at all, the gateway performs "vpn routing" between remote access VPNs and site-to-site VPN. I think only should take care not to overlap/conflict with other tunnels. 

Regards

[the_rock]

Yea...thats my biggest worry. I also think it may cause issues with actual remote office mode...I bet your customers are using different network for office mode?

Andy