3

I'm trying to establish a site-to-site VPN connection from office to datacenter.

Cisco RV042G and SonicWall NSA2400

In the office; we have the subnet 10.0.0.0/24 defined and hosts from 10.0.0.150 to 10.0.0.190 defined (.150 being the router)

In the datacenter; I have an interface (X4) that is setup for network 10.0.0.0/24 (.1 being the interface).

I can sucessfully establish the VPN connection; but then I can't reach the datacenter (for example by pinging 10.0.0.21 which is a server).

Ideally i'd like to map our office to the same 10.0.0.0/24 subnet on datacenter. So 10.0.0.150-180 would be able to ping the whole 10.0.0.0/24 subnet.

Here's the SonicWall configuration :

OfficeSubnet10 is defined as a host range : 10.0.0.150-10.0.0.180

OfficeNatInteroute is defined as range : 10.0.0.190-10.0.0.220

enter image description here enter image description here enter image description here

And the Cisco Side.

enter image description here

I must be missing something really obvious but can't find what.

Disco
  • 1,421
  • 5
  • 20
  • 34
  • 2
    I believe your problem is because both sides are in the same 10.0.0.0/24 subnet. The devices wouldn't know to route to the other side. Is it possible to renumber the IPs on one side? If not, could you use multiple /30 IP subnets just for the devices as the local and remote subnets, and then have static routes to get to the other side via the /30s? – Paul Kroon Jan 25 '13 at 18:27

1 Answers1

1

You cannot have the same subnet on both sides of the tunnel. You're essentially attempting to extend a L2 network from the office to the data center across a L3 VPN. Paul Kroon above mentioned a couple of workarounds. The other is to do double NAT: Source NAT the office to 10.1.0.0 and DC to 10.2.0.0. You must have unique (non NAT'd and routable) for the two ends of the VPN tunneL, usually the public addresses. Looks like the SonicWall has some NAT policies that could work with the Cisco device to accomplish this.

generalnetworkerror
  • 401
  • 2
  • 7