This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Single VPN Tunnel & Multiple networks

I'm looking to do the following between two sites.

10.2.0.0/16 (ASTARO V5 - Site1)------ VPN ------(ASTARO V5 - Site2)----Router---- 10.1.1.0/24 & 192.168.0.0/24

Is there any way to get the VPN to connect to either subnet at site 2 just using the one VPN Rule?

When i look at the instructions it looks like only one subnet can be entered.

Thanks,

This thread was automatically locked due to age.

Parents

0 Stephan_Scholz over 21 years ago

Hi AndyReid,

you can simply define two equivalent connections, with different subnets, but using the same keys, etc. They will coexist with each other without problems.

Regards,
Stephan
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 Stephan_Scholz over 21 years ago

Hi AndyReid,

you can simply define two equivalent connections, with different subnets, but using the same keys, etc. They will coexist with each other without problems.

Regards,
Stephan
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 Mike_Cunningham over 20 years ago in reply to Stephan_Scholz

One time when I tried this (2 VPNs connecting two locations with two subnets at one location), it failed unless the keys were exactly the same for each VPN. Is this still a requirement ?

Mike
Cancel
Vote Up 0 Vote Down

Cancel
0 eos over 20 years ago in reply to Mike_Cunningham

Check the proposal (network source/destionation) on both 2 gateway - you can use same KEY for all IPSEC connections
Cancel
Vote Up 0 Vote Down

Cancel
0 jimd over 18 years ago in reply to eos

I have a question. In a situation like this, where you have 2 tunnels between 2 sites, how does the Astaro know which tunnel to send the packets down? Does it look at the source address? On the remote end it has 2 different destination networks so it can send packets down the right tunnel based on the destination address.
Cancel
Vote Up 0 Vote Down

Cancel
0 BarryG over 18 years ago in reply to jimd

It would be based on the dest. address.

Barry
Cancel
Vote Up 0 Vote Down

Cancel