create a vpn connections when both sides have same network addressing

I have to create a VPN between 2 sites but they both have the same internal ip scheme of 192.169.0XX
I believe I have to do NAT but I need step by step instuructions on how to do this.
Thanks
kcassoneAsked:
Who is Participating?
 
jakethecatukConnect With a Mentor Commented:
[quote from my first post]don't think you're going to be able to solve this one without changing the range of one site.[end quote]

guess what - you can't do it with your current config.
0
 
jakethecatukCommented:
if they are on the same IP address range, then you will really struggle.

if you have a device at each location with an IP of 192.168.0.1 how will the VPN tunnel know which device you want?

don't think you're going to be able to solve this one without changing the range of one site.
0
 
kcassoneAuthor Commented:
There must be way to do this!
0
Building an Effective Phishing Protection Program

Join Director of Product Management Todd OBoyle on April 26th as he covers the key elements of a phishing protection program. Whether you’re an old hat at phishing education or considering starting a program -- we'll discuss critical components that should be in any program.

 
jakethecatukCommented:
a lot will depend on what you are using to establish the VPN link.

what hardware do you have?
0
 
JamesSenior Cloud Infrastructure EngineerCommented:
This is not the best to do it. Why not change the ip schema on either site? Technically this could prove very cumbersome. When PCs are sending and receiving packets your router performs what is known as bitwise, where is compare the ip host address and the subnet to decide if the packet is destined internally or an external network. I can't see how this can be achieved when both networks are using the same ip schema.
0
 
compaqusCommented:
Your host will not ask your default gw if the address you are looking for is on the same subnet as yourself.

http://www.experts-exchange.com/Software/System_Utilities/Remote_Access/VPN/Q_23024107.html
0
 
compaqusCommented:
Maybe a peer to peer route? And static IP-s on both networks...
0
 
kcassoneAuthor Commented:
We need to keep information separate.
0
 
jakethecatukCommented:
if you have to keep the information seperate, why the need for the VPN?

again - what hardare are you using to establish the VPN?
0
 
JamesSenior Cloud Infrastructure EngineerCommented:
This is not going to work for you. I have explained to you in my previous comment why the network id's have to be different.
0
 
kcassoneAuthor Commented:
For backups

We are using netvanta 3200 and
Netgear fvs318
0
 
digitapConnect With a Mentor Commented:
jake's got it.  i've researched this before and the netgear fvs318 will not perform NAT over VPN.  also, with a cursory glance at the specs on the netvanta, it doesn't look like it will either.

NAT over VPN is possible as I've done it with Sonicwall hardware many times.  As indicated already, the best option is to change the IP network so the two sites don't have the same IP subnet.  However, this isn't always an option.
0
 
digitapCommented:
@kcassone :: i'm sorry you weren't able to find the answer you were seeking here.  unfortunately, the hardware you have is limiting your abilities to perform a VPN with identical subnets.  this was pointed out by myself (http:#a34088449) and jake (http:#a34088381).  although not a desireable solution, it is still a solution and points should be awared accrodingly.  two options exist:

all points going to jake for his solution here: http:#a34088381
split between myself (http:#a34088449) and jake (http:#a34088381)

i suppose there is a third option, which is to have the question deleted, but that would be up to a moderator.
0
 
digitapCommented:
the author's hardware doesn't support what they are requesting.  my solution and jake's solution point this out.  i'm proposing a point split:

Jake's as the solution: http:#a34088381
Mine as assisted solution: http:#a34088449
0
 
jakethecatukCommented:
I agree with digitap
0
 
thermoduricModeratorCommented:
I am restarting the auto-close procedure on behalf of the question asker. After Moderator review, the new disposition seems to be more appropriate to the outcome of this question.

- thermoduric -
EE Community Support Moderator
http://www.experts-exchange.com/Q_26663260.html

0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.