This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Phase 2 tunnel consolidate tunnels?

Does anyone have any strange issues doing Phase 2 consolidations?

 

HQ 172.16.6.0/24

SiteA 172.16.0.0/24

SiteB 172.16.3.0/24

 

To make tunnels easier I just set remote tunnels to 172.16.0.0/23

SiteA                 <>              HQ

172.16.0.0/24   <> 172.16.0.0/23

 

SiteB                 <>              HQ

172.16.3.0/24   <> 172.16.0.0/23

 

This configs allow all 3 sites to talk to each other. When I spoke to a Sophos tech, he said they usually just list all remote subnets individually in the Phase 2. This can be a big list if we have multiple remote sites.

I am wondering if anyone else does this. Do they experience any issues? I currently have an app that gets timeouts. Not sure if it is related to the current tunnel config. Can ping and connect to it. Access to file shares etc..



This thread was automatically locked due to age.
Parents
  • After viewing site a and site b network, I can say that your IP planning is very poor. Your subnets are over lapping with each other. Please share  HQ subnets (one by one) so we can think about another way. Do you have 172.16.0.0/24 subnet on the HQ also?

Reply
  • After viewing site a and site b network, I can say that your IP planning is very poor. Your subnets are over lapping with each other. Please share  HQ subnets (one by one) so we can think about another way. Do you have 172.16.0.0/24 subnet on the HQ also?

Children
No Data