<div>
I think you will need to change one of the site subnets to do this with one main VPN device. It will get confused trying to use the same subnet. 
 
You could consider adding an IP address to the main service and add a separate VPN router (so now you have two VPN routers) and then link them together in the main network. I have not done this, but it might work. 
 
I think the easiest approach would be to pick the site that has the fewest issues and change its subnet 
 
.... Thinkpads_User
</div>

<div>
<div class="content wysiwyg-content">
Hi , 
 
We have to establish a site-site VPN tunnel between two locations. 
 
Site-A and Site-B. 
 
Site-A network is 192.168.100.0/24 (which is already in production environment) 
 
Unfortunately Site-B also 192.168.100.0/24 (which is also production environment) 
 
Scenario is 
 
Site-A LAN -. (192.168.100.0/24) 
&nbsp; &nbsp; &nbsp; | 
ASA 5510 Firewall -&gt; 
&nbsp; &nbsp; &nbsp; | 
Internet Router &nbsp; 
&nbsp; &nbsp; &nbsp; | 
Internet 
&nbsp; &nbsp; &nbsp; | 
Internet Router 
&nbsp; &nbsp; &nbsp; &nbsp;| 
Cisco ASA Firewall 
&nbsp; &nbsp; &nbsp; &nbsp; | 
&nbsp;SIte-B Subnet (192.168.100.0/24) 
 
In the above , how to depoly S2S tunnel between locations between two ASA Firewlls 
 
Regards 
Ramu
</div>
</div>

Hi ,

We have to establish a site-site VPN tunnel between two locations. 

Site-A and Site-B.

Site-A network is 192.168.100.0/24 (which is already in production environment)

Unfortunately Site-B also 192.168.100.0/24 (which is also production environment)

Scenario is 

Site-A LAN -. (192.168.100.0/24)
      |
ASA 5510 Firewall -> 
      |
Internet Router  
      |
Internet 
      |
Internet Router 
       |
Cisco ASA Firewall 
        |
 SIte-B Subnet (192.168.100.0/24)

In the above , how to depoly S2S tunnel between locations between two ASA Firewlls

Regards
Ramu

I think you will need to change one of the site subnets to do this with one main VPN device. It will get confused trying to use the same subnet.

You could consider adding an IP address to the main service and add a separate VPN router (so now you have two VPN routers) and then link them together in the main network. I have not done this, but it might work.

I think the easiest approach would be to pick the site that has the fewest issues and change its subnet 

.... Thinkpads_User

VPN tunnel configuration of same  subnets across the locations

Hi ,

We have to establish a site-site VPN tunnel between two locations. 

Site-A and Site-B.

Site-A network is 192.168.100.0/24 (which is already in production environment)

Unfortunately Site-B also 192.168.100.0/24 (which is also production environment)

Scenario is 

Site-A LAN -. (192.168.100.0/24)
      |
ASA 5510 Firewall -&gt; 
      |
Internet Router  
      |
Internet 
      |
Internet Router 
       |
Cisco ASA Firewall 
        |
 SIte-B Subnet (192.168.100.0/24)

In the above , how to depoly S2S tunnel between locations between two ASA Firewlls

Regards
Ramu

Hardware-based firewalls provide more sophisticated protection for inbound and outbound traffic than the simple Windows software firewall or the basic NAT firewalls found in routers. These devices implement techniques such as stateful packet inspection, deep packet inspection, and content filtering; and may include built-in antivirus and anti-malware protection.

Hardware Firewalls

Internet Protocol Security (IPsec) is a protocol suite for secure Internet Protocol (IP) communications by authenticating and encrypting each IP packet of a communication session. IPsec includes protocols for establishing mutual authentication between agents at the beginning of the session and negotiation of cryptographic keys to be used during the session. IPsec can be used in protecting data flows between a pair of hosts (host-to-host), between a pair of security gateways (network-to-network), or between a security gateway and a host (network-to-host). IPsec is an end-to-end security scheme operating in the Internet Layer of the Internet Protocol Suite.