Site to site with same subnet

riaano

Hi,
I have a question that i think i know the answer to, but need confirmation….
I have 2 sites both with PFsense 2.0
Site A network is 10.0.0.0/8 and Site B is also 10.0.0.0/8
but
Site A uses IP range 10.0.0.x / 10.1.0.x / 10.0.1.x and Site B uses 10.1.105.x
Is an IPSec tunnel impossible ?

I know it worked when Site A used 10.0.0.0/24 and Site B used 10.1.105.0/24....
but i had to extend Site A's iprange....

Any help will be appreciated.

Thanks
Riaan

Metu69salemi

How big mask you determined to site A? If i shake from the sleeve "right" mask it would be /15 or something like that and site B is summarized in there. –> so my first quess would be, it doesn't work unless you change site A's subnetting more continously like so /22 /21 /20 masks would work and then site B could be contacted with VPN again

riaano

Hi Metu69salemi,

Thanks for the quick response.

Maybe it'd just cause it after 1am, but im not making much sense of your reply…
Could you put it in "lay-mans-terms" please :)

Thanks

Metu69salemi

I admit i might've been overlooked something badly, but this is what i mean


In binary form: SITE A
10.1.0.0 : 00001010.00000001.00000000.00000000
10.0.1.0 : 00001010.00000000.00000001.00000000
10.0.0.0 : 00001010.00000000.00000000.00000000 
Site A SM: 11111111.11111110.00000000.00000000 = /15 == 255.254.0.0
and that means, that Site A covers anything between 10.0.0.0 -- 10.1.255.255 as local lan

In binary form: SITE B
10.1.105.0: 00001010.00000001.01101001.00000000
Site B SM:  11111111.11111111.11111111.00000000 = /24 == 255.255.255.0


Is it possible to set Site A like
10.0.0.0: 00001010.00000000.00000000.00000000
10.0.1.0: 00001010.00000000.00000001.00000000
10.0.2.0: 00001010.00000000.00000010.00000000
SiteA SM: 11111111.11111111.11111100.00000000 = /22 == 255.255.252.0

And if something is local network, why to send it via vpn..

riaano

Aaahhhhh…..now it makes sense :)

I will try in about 8 hrs and see what happens :)

Thank you very much.