Site to site with same subnet



  • Hi,
    I have a question that i think i know the answer to, but need confirmation….
    I have 2 sites both with PFsense 2.0
    Site A network is 10.0.0.0/8 and Site B is also 10.0.0.0/8
    but
    Site A uses IP range 10.0.0.x / 10.1.0.x / 10.0.1.x and Site B uses 10.1.105.x
    Is an IPSec tunnel impossible ?

    I know it worked when Site A used 10.0.0.0/24 and Site B used 10.1.105.0/24....
    but i had to extend Site A's iprange....

    Any help will be appreciated.

    Thanks
    Riaan



  • How big mask you determined to site A? If i shake from the sleeve "right" mask it would be /15 or something like that and site B is summarized in there. –> so my first quess would be, it doesn't work unless you change site A's subnetting more continously like so /22 /21 /20 masks would work and then site B could be contacted with VPN again



  • Hi Metu69salemi,

    Thanks for the quick response.

    Maybe it'd just cause it after 1am, but im not making much sense of your reply…
    Could you put it in "lay-mans-terms" please  :)

    Thanks



  • I admit i might've been overlooked something badly, but this is what i mean

    
    In binary form: SITE A
    10.1.0.0 : 00001010.00000001.00000000.00000000
    10.0.1.0 : 00001010.00000000.00000001.00000000
    10.0.0.0 : 00001010.00000000.00000000.00000000 
    Site A SM: 11111111.11111110.00000000.00000000 = /15 == 255.254.0.0
    and that means, that Site A covers anything between 10.0.0.0 -- 10.1.255.255 as local lan
    
    In binary form: SITE B
    10.1.105.0: 00001010.00000001.01101001.00000000
    Site B SM:  11111111.11111111.11111111.00000000 = /24 == 255.255.255.0
    
    
    
    Is it possible to set Site A like
    10.0.0.0: 00001010.00000000.00000000.00000000
    10.0.1.0: 00001010.00000000.00000001.00000000
    10.0.2.0: 00001010.00000000.00000010.00000000
    SiteA SM: 11111111.11111111.11111100.00000000 = /22 == 255.255.252.0
    
    

    And if something is local network, why to send it via vpn..



  • Aaahhhhh…..now it makes sense :)

    I will try in about 8 hrs and see what happens :)

    Thank you very much.


Log in to reply