Multiple IPSEC Customers with the same LAN subnet
-
Hello,
I have a pfSense 21.05 running IPSEC in an AWS VPC. It is in a single routing domain and set up as a VPN Hub. It is used to connect my VPC to multiple 3rd party locations via IPSEC. It is only used to source traffic from my VPC TO the client's LAN. However I have two customers using the same remote subnet. Is there anything on pfSense that would allow me to connect to two different remote locations that use the same subnet? NAT/BiNAT within the P2 setup doesn't seem to address this particular scenario.
MyVPC (10.10.1.0/24) -> My pfSense -> ipsec -> Customer#1 (10.10.200.0/24)
MyVPC (10.10.1.0/24) -> My pfSense -> ipsec -> Customer#2 (10.10.200.0/24)P.S - I did try multiple searches prior to submitting this post. I wasn't able to find anything specific about routing TO multiple remote sites sharing the same network space.
-
No, the remote system must perform the NAT in this case. Your side must see distinct networks for each tunnel.
-
@jimp
Ok, thank you for the response. That does make sense to me as well but I wanted to check just in case.
Thanks!