Site to Site VPN with Overlapping network and other network Access..

Hi all,
i need to setup a site to site Tunnel to a remote site. My remote site got the network which has overlapped with one of our network(192.168.10.0/24) in my site. remote site dont need to access this network(192.168.10.0/24) in my site ,but they have to access other networks (192.168.x.0)
i have prepared the below configuration ,relevant to nat to achiev the goal. Appreciate help to verify and help to achive this...
i have attached one rough diagram also..
Mysite
access-list acl-httsamorocco extended permit ip 192.168.73.0 255.255.255.0 192.168.74.0 255.255.255.0
access-list nonat extended permit ip 192.168.x.0 255.255.255.0 192.168.74.0 255.255.255.0
access-list policy-nat extended permit ip 192.168.10.0 255.255.255.0 192.168.74.0 255.255.255.0
static (inside,outside) 192.168.73.0  access-list policy-nat
Remote Site
access-list policy-nat extended permit ip 192.168.10.0 255.255.255.0 192.168.73.0 255.255.255.0
static (inside,outside) 192.168.74.0  access-list policy-nat
Thanks in Advance..
Shanil

It has to be configured on both sides.
X and Y are unused networks in this example: Site A has to hide 172.16.1.0/24 behind X when communicating to Y, site B has to hide 172.16.1.0/24 behind Y when communicating to X. The users in site A have to use Y as a destination, users in site B have to use X as destination. To make it usable for the users you should include the destinations in the DNS so that they never need the destination-IP.
On the ASA you describe the communication 172.16.1.0/24 -> Y with an access-list and add that ACL to your static-command. You find an example here:
http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00808c9950.shtml
Don't stop after you've improved your network! Improve the world by lending money to the working poor:
http://www.kiva.org/invitedby/karsteni

Similar Messages

  • Site-to-ste VPN with overlapped subnet.

    Hi Friends
    I have to set up site to site VPN with overlapped network ASA 5540 and checkpoint   what is the best parctice to achive tis goal
    Thanks in advance

    It has to be configured on both sides.
    X and Y are unused networks in this example: Site A has to hide 172.16.1.0/24 behind X when communicating to Y, site B has to hide 172.16.1.0/24 behind Y when communicating to X. The users in site A have to use Y as a destination, users in site B have to use X as destination. To make it usable for the users you should include the destinations in the DNS so that they never need the destination-IP.
    On the ASA you describe the communication 172.16.1.0/24 -> Y with an access-list and add that ACL to your static-command. You find an example here:
    http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00808c9950.shtml
    Don't stop after you've improved your network! Improve the world by lending money to the working poor:
    http://www.kiva.org/invitedby/karsteni

  • ACS Database Replication over VPN with overlapping Network Addresses

    We currently have two co-locations each situated in different provinces. We have two ACS servers which we want to deploy at each co-location. All our network equipments are behind PIX/ASA devices. Getting them to replicate over the VPN should be easy but in our case we have overlapping Network Addresses at both ends of the tunnels.
    As per Cisco data does not transit a NAT device when the two Cisco Secure ACS servers communicate and a successful database replication can occur only if the secondary ACS server perceives no change in the IP header or content of the data it receives. So that means we will not be able to Implement NAT to achiever this.
    Has any one of you faced this problem of replicating ACS Database over the VPN with overlapping Network Addresses and was anyone able to successfully solve this issue using a work around ?
    All provided info and comments are greatly appreciated.

    I can help with the 3005 setup if you decide to go that route.
    You will need to add 2 network list entries under Configuration>Policy Management>Traffic Management>Network Lists.
    You will need to configure a local and remote address. The local will be one of the public ip's for the site.(Provided by your ISP)The remote will be the device you are connecting to on the other end.
    You will also need to add a Nat Lan to Lan rule under Configuration>Policy Management>Traffic Management>Nat>Lan to Lan.
    Use a static Nat type. The rest will look similar to my example.
    Source(Local address)Translated(Public Ip Address used in the network local list)Remote(Ip address of the device on the other end)
    Now just create an Ipsec lan to lan tunnel. You will need to agree with the ISP on des type and auth type. Use you local and remote networks you created earlier.

  • Have published iweb site for five years with no problems and just opened a new site and get - 404: Page not found  This error is generated when there was no web page with the name you specified at the web site.-is the problem with iweb or with hosting?  T

    I am sorry if thie is republished-My first time doing this and I am not sure what goes where and where to hear feedback.
    Have published iweb site for five years with no problems and just opened a new site and get -
    404: Page not found 
    This error is generated when there was no web page with the name you specified at the web site.-
    Troubleshooting suggestions:
    Ensure the page you are linking to exists in the correct folder.
    Check your file name for case sensitivity . Index.htm is not the same as index.htm!
    Temporarily disable any rewrite rules by renaming your .htaccess file if it exists
    is the problem with
    iweb or with hosting?
    One Apple tech started to fix Iweb and had to end session and the next said problem with hosting at Network Solutions as it published
    to local folder. NWS has checked sttting a few times-
    Any help would be extremely appreciated as trying to fix this for about five weeks
    Thanks VG
    <Email Edited by Host>

    It's a really bad idea to post your email address - it's an invitation to spam - and I've asked the Hosts to remove it. (Even though I've now noticed you mis-spelled it! - anyway, never post your address in a forum.)
    You have a site here: http://virginiagordon.com/www.virginiagordon.com/WELCOME.html
    If that's not the page you are having trouble with, what is that page's URL?

  • Router to Router VPN with Overlapping internal networks

    Hello Experts,
    One quick question. How do I configure a Router to Router VPN with overlapping internal networks???
    Both of my internal networks have ip address of 192.168.10.0 and 192.168.10.0
    Any link or config will be appreciated. I've been looking but no luck.
    Thanks,
    Randall

    Randall,
    Please refer the below URL for configuration details:
    Configuring an IPSec Tunnel Between Routers with Duplicate LAN Subnets
    http://www.cisco.com/en/US/tech/tk583/tk372/technologies_configuration_example09186a00800b07ed.shtml
    Let me know if it helps.
    Regards,
    Arul
    ** Please rate all helpful posts **

  • Safari won't work with CNN Pipeline and other sites all of a sudden?

    Safari won't work with CNN Pipeline and other sites all of a sudden? A few weeks ago Safari was working OK but now I often have to use Firefox to visit certain webpages.
    Anyone else having this same problem?
    Is there a quick fix?
    I'm using Safari 2.0.4
    Thanks.

    Hi QuickTimeKirk,
    I have WMP version 9, as well. I do not use F4M, for many users f4mac is what helps.
    I find some items work while others do not. I always get an alert about the wmp , which version it is, takes very long to load, I find it is not consistant with Safari, as seems the poster of this topic has found.
    Quoted from ms Mactopia site:
    http://www.microsoft.com/windows/windowsmedia/player/mac/
    Download and find information about Windows Media Player for Mac and playing Windows Media files in your QuickTime Player. Which download is right for you?
    Windows Media Components for QuickTime
    Windows Media Player 9 for Mac OS X
    Windows Media Player 7.1 for Mac
    Important Information
    Microsoft will continue to offer Windows Media Player for Mac as a download free of charge, but has no plans to provide future updates or product support.
    We are pleased to offer Windows Media® Components for Quicktime, by Flip4Mac™, as an alternative for Mac OS X users wanting to play Windows Media Audio and Windows Media Video.
    ~•~
    Validation of the cnn home page using the W3C Validatior, http://validator.w3.org/
    http://validator.w3.org/check?uri=http%3A%2F%2Fwww.cnn.com%2F
    though 41 errors is not as poor as some, Firefox handles the site better than Safari, imo.
    Some sites just work better with Firefox or an other browser.
    Cheers,
    Eme '~[ )

  • How do I connect my external hard drive with all of my digital media to my Apple TV network and make it accessable 24/7?

    How do I connect my external hard drive with all of my digital media to my Apple TV network and make it accessable 24/7?  I have the latest Apple TV, ipads, iPhones as well as a solid HP Windows machine all on my home network.  Is there a way that I can connect my hard drive to my receiver or Apple TV directly so that the digital media is available on my network 24/7 rather than have it connected to my computer and available through Home Share which never works anyway??

    Sorry it's all done through iTunes.
    The following article(s) may help you with home sharing.
    Troubleshooting Home Sharing
    Troubleshooting Wi-Fi networks and connections
    Recommended Wi-Fi settings
    Wifi Diagnostic Software (for Mac users)
    You may also find some help on this page, where I’ve collected some of the more unusual solutions to network issues.

  • When i try to order prints i get an error message saying there is a problem with my network and my network is working

    when i try to order prints i get an error message saying there is a problem with my network and my network is working. How can i solve this problem?

    Try a different media. I have good luck using Maxell discs.

  • Can no longer connect to my network and 'forget network' option has disappeared??

    Can no longer connect to my network and "forget network" option has disappeared???  (Ipod touch 5th generation). This happened on both my children's ipods. We have reset network settings but it doesn't help.

    JEM24 , your suggestion is included in:
    - iOS: Troubleshooting Wi-Fi networks and connections
    Turn your Wi-Fi router off and on2. If your ISP also provides cable or phone service, check with them before attempting this step to avoid interruption of service.
    JEM24 wrote:
    Sorry Mindi, also have your tried rebooting your router? That's all. Try that before you attempt to Restore. Cheers.

  • What is the differnce between t-mobile network and EE network?

    what is the differnce between t-mobile network and EE network?

    Difference as far as speeds?
    Difference in Prices?
    What do you want to do in the UK with your iPhone?
    Personally, I have enjoyed using 3 UK and Vodafone while I was in Heathrow.

  • Difference between new network and extended network

    Difference between extended network and new network settings

    An "extended" network acts as one large wireless network. Wireless devices can roam anywhere a signal is present and stay on the network without having to make any changes.
    A "new" network will require that a wireless device manually "switch" to that network and enter the password for the network to connect whenever you want to use that network. In other words, a "new" network will use a different wireless network name and password, which will require that you manually log on to that network.
    The exception would be if you created a "new" wireless network and used the same wireless network name, same wireless security settings and same password as the "main" network and connected the AirPort back to the main router using an Ethernet cable. In that case, you would have an "Ethernet extended wireless" network.

  • I installed Lion and now seem to have problems with Microsoft Silverlight and other plug ins and applications.  I haven't ever used time machine to back up (my bad I know).  Is there a way to go back to snow leopard with messing up all my files and my set

    I installed Lion and now seem to have problems with Microsoft Silverlight and other plug ins and applications.  I haven't ever used time machine to back up (my bad I know).  Is there a way to go back to snow leopard with messing up all my files and my set?

    Are you using the latest version of Silverkeeper? - v.2.0.2 is stated to be compatible with Snow Leopard.
    http://www.lacie.com/silverkeeper/
    If it's messing things up you could try asking LaCie Support for assistance.

  • Yosemite finder crashes with previewig .txt and other files

    Hello,
    under Yosemite  the Finder crashes with previewig .txt and other files.
    Is this just my problem? Help please.
    Thank you very much.
    Regards.

    Launch the Console application in any of the following ways:
    ☞ Enter the first few letters of its name into a Spotlight search. Select it in the results (it should be at the top.)
    ☞ In the Finder, select Go ▹ Utilities from the menu bar, or press the key combination shift-command-U. The application is in the folder that opens.
    ☞ Open LaunchPad and start typing the name.
    Step 1
    For this step, the title of the Console window should be All Messages. If it isn't, select
              SYSTEM LOG QUERIES ▹ All Messages
    from the log list on the left. If you don't see that list, select
              View ▹ Show Log List
    from the menu bar at the top of the screen.
    In the top right corner of the Console window, there's a search box labeled Filter. Initially the words "String Matching" are shown in that box. Enter the name of the crashed application or process. For example, if Safari crashed, you would enter "Safari" (without the quotes.)
    Each message in the log begins with the date and time when it was entered. Select the messages from the time of the last crash, if any. Copy them to the Clipboard by pressing the key combination command-C. Paste into a reply to this message by pressing command-V.
    ☞ The log contains a vast amount of information, almost all of which is irrelevant to solving any particular problem. When posting a log extract, be selective. A few dozen lines are almost always more than enough.
    Please don't indiscriminately dump thousands of lines from the log into this discussion.
    Please don't post screenshots of log messages—post the text.
    ☞ Some private information, such as your name, may appear in the log. Anonymize before posting.
    Step 2
    In the Console window, select
              DIAGNOSTIC AND USAGE INFORMATION ▹ User Diagnostic Reports
    (not Diagnostic and Usage Messages) from the log list on the left. There is a disclosure triangle to the left of the list item. If the triangle is pointing to the right, click it so that it points down. You'll see a list of crash reports. The name of each report starts with the name of the process, and ends with ".crash". Select the most recent report related to the process in question. The contents of the report will appear on the right. Use copy and paste to post the entire contents—the text, not a screenshot.
    I know the report is long, maybe several hundred lines. Please post all of it anyway.
    If you don't see any reports listed, but you know there was a crash, you may have chosen Diagnostic and Usage Messages from the log list. Choose DIAGNOSTIC AND USAGE INFORMATION instead.
    In the interest of privacy, I suggest that, before posting, you edit out the “Anonymous UUID,” a long string of letters, numbers, and dashes in the header of the report, if it’s present (it may not be.)
    Please don’t post other kinds of diagnostic report—they're very long and rarely helpful.

  • How to turn off home share in original iPad? Want to stop it syncing with pod, phone and other ipad.

    How to turn off home share in original iPad? Want to stop it syncing with pod, phone and other ipad.

    Home share got nothing to do with sync. Figure out which one you want off and come back.

  • My mac book air connects to my network and gets internet access but time machine cannot find my airport base station to set up time machine

    My mac book air connects to my network and gets internet access but airport utility  cannot find my airport base station to set up time machine

    airport utility  cannot find my airport base station to set up time machine
    Normally, AirPort Utility is not used or needed to set up Time Machine backups......unless a default setting on the Time Capsule to Enable File Sharing has been changed.
    On the other hand, if you open AirPort Utility, a picture of the Time Capsule should be displayed. Are you saying here that the Time Capsule does not appear when you open AirPort Utility?

Maybe you are looking for