Site to site VPN

[chandrashekhar]

Hi Everyone,

Can you help me how to implement Site to site VPN if Both sites have the same network? How to set routing and make end-to-end connection? 

[PhoneBoy]

Are both gateways managed by the same management?
In any case, you'll have to pick a subnet that does not overlap and which VPN peer will be performing the NAT.
Assuming the chosen subnet is only reachable through default route for your clients, there will be no additional routing changes needed.

[the_rock]

You will need NAT in such a scenario, 100%. As Phoneboy said, routing when it comes to CP vpn is handled by the community itself, if you will, so you should not need an additional routes, unless its route based tunnel, then you need VTIs and all that, which you can use to route the traffic. If its just regular domain based tunnel, then not required.

Andy

[Lesley]

Only thing I can add to above post is to make sure to put the NAT pool in the relevant encryption domains.