Link to home
Start Free TrialLog in
Avatar of First Last
First LastFlag for United States of America

asked on

Span IP Range across two sites via Cisco ASA Site-to-Site VPN

HI EE,

For one site I have a mixture of  75 servers and 325 end-user devices. This IP range has approximately 400 IPs in use. I need to move my servers to a new location and thus put them in theory on a new IP range. My time is very limited and I can't change all the IPs on the end user devices. Our notes are also very limited and I can't successfully change all of the server IPs with limited downtime.

Details:

IP Range: 10.35.208.0/20
75 servers
325 end user devices
New site will be via a Cisco ASA Site-to-Site VPN
End user devices and servers are often 1 ip away from each other. We can subnet the IP range into smaller blocks.

Options: Besides changing the IPs on all the PCs or all the servers, what are my options?

Thank you,
SOLUTION
Avatar of El Fierro
El Fierro
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of First Last

ASKER

Interesting idea, that will take care of about 100 of the devices quickly with a Microsoft Group Policy. Then there would be another 225 printers, audio video equipment, tvs, and other devices to touch manually. Any other suggestion?
Thats alot of devices left...
The server ips would have to stay since changing those ips would be a bigger headache.start with the least amount of static devices and work your way up. Do the ips on the other site overlap with your current scope (s)?
The remote site doesn't exist yet. so, the IP range can be anything we want. We found out that our datacenter is to be migrated in the next 90 days. I'm trying to come up with the easiest idea for a temporary fix regarding the servers and other devices being on the same IP range. If there is a way to use the same ip range across two sites that would be a good temporary solution.
ASKER CERTIFIED SOLUTION
Avatar of rauenpc
rauenpc
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Ultimately, we made over a dozen new IP ranges with VLANs at the existing and new site. The PCs as advised were easy to update by changing them to DHCP via GP. The 200 other devices (half of which were printers) had to all be touched manually and at times required the vendor to be involved. For the routing we used two ASA firewalls (a lot of hair pinning) and ultimately it worked out.