How to connect 2 VPN-Client (safeNet) from same subnet, to Office..

Posted on 2006-04-23
Last Modified: 2010-04-08
Hi there Gents...

Spend long time browsing through topics, but none of them seems to give any hints...

I have 1 Office with a Zywall 35. -  Support up to 35 simultaneous IPSec connections.
Connections from different single locations works just fine.

Now.. from another office... I want to have 2 clients from the same subnet, connected via Safenet VPN-clients to the Zywall at the same time.
The problem is that, one client connects and works fine,
but when the other client connects, the first gets disconnected.

I know something about not having the same ip-range or subnet.
But here´s the deal.
Client 1= /24
Client 2= /24
They share one DSL-modem with dynamic IP to internet.

At the Office - from internet to lan.
DSLmodem->CiscoRouter(WAN:static public IP.. InsideLAN: ->
Zywall(WAN: LanInside:>
Lan nodes : -

I know the best solution would be to install VPNbox ->VPNbox..
but that´s not an issue for the company.

Any help would be great.

Question by:HHLiisborg
    LVL 77

    Accepted Solution

    No question the same subnets is usually an issue, however with Safenet clients, they are connected with a virtual adapter and it may work. Wondering if the problem might be the router at that site. Some routers will only support a single VPN client (pass-through tunnel), the second is either not allowed or dropped. Can you verify if that router does in fact support multiple tunnels? What router is installed at the satellite office?

    Author Comment

    Hi Robwill, sorry the delay..

    It might have been the ISP-router ( Efficient Speedstreem). It´s gone by now.
    It´s also a VPN-enabled device, but I couldn´t get access, cause of missing passwords ect.
    So I installed a new vpn-router. Site-to-Site.

    What I also noticed, was at the Main-office 1, they had another nat-router !! between internet an firewall.
    So i had to change IP-(content) from Main-office public IP, to include the WAN-IP of the Zywall and nat-traversal on both routers.

    > Internet - Nat-roter - Zywall - LAN

    Satelite Office
    > Internet - Zywall - LAN

    So.. thanks for the clue, we r up an running.

    PS.. If I want VPN-client access as well on the MainOffice Zywall, I just have to create
    one more Gateway / Netpolicy right?
    LVL 77

    Expert Comment

    by:Rob Williams
    >>"PS.. If I want VPN-client access as well on the MainOffice Zywall, I just have to create
    one more Gateway / Netpolicy right?"
    I am not familiar with the Zywall units but that is the way it would normally be done. 1 policy for software clients and 1 for each site-to-site hardware tunnel.
    Glad to hear you were able to resolve.

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    How your wiki can always stay up-to-date

    Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
    - Increase transparency
    - Onboard new hires faster
    - Access from mobile/offline

    If you are like regular user of computer nowadays, a good bet that your home computer is on right now, all exposed to world of Internet to be exploited by somebody you do not know and you never will. Internet security issues has been getting worse d…
    The DROP (Spamhaus Don't Route Or Peer List) is a small list of IP address ranges that have been stolen or hijacked from their rightful owners. The DROP list is not a DNS based list.  It is designed to be downloaded as a file, with primary intention…
    It is a freely distributed piece of software for such tasks as photo retouching, image composition and image authoring. It works on many operating systems, in many languages.
    Migrating to Microsoft Office 365 is becoming increasingly popular for organizations both large and small. If you have made the leap to Microsoft’s cloud platform, you know that you will need to create a corporate email signature for your Office 365…

    737 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    18 Experts available now in Live!

    Get 1:1 Help Now