Community discussions

MikroTik App
 
marchand
just joined
Topic Author
Posts: 2
Joined: Wed Dec 01, 2010 6:41 pm

Ipsec - Overlapping Private Networks

Fri Dec 10, 2010 10:15 pm

Hello ,
It is possible to setup an IPsec tunnel between two routeros with overlapping private networks ? My network setup is :

Site A
LAN 192.168.1.0/24
WAN 86.xxx.xxx.xxx/27

Site B
LAN 192.168.1.0/24
WAN 86.xxx.xxx.xxx/27

Any hint ?
 
fewi
Forum Guru
Forum Guru
Posts: 7717
Joined: Tue Aug 11, 2009 3:19 am

Re: Ipsec - Overlapping Private Networks

Mon Dec 13, 2010 5:22 pm

http://wiki.mikrotik.com/wiki/Manual:Pa ... encryption

IPSec policies are evaluated after post-routing, so you can use src-nat to NAT the two networks against each other and make the IP space unique, and then send the NAT'd traffic via IPSec.
The 'netmap' NAT action can translate whole network ranges easily.
 
roadracer96
Forum Veteran
Forum Veteran
Posts: 733
Joined: Tue Aug 25, 2009 12:01 am

Re: Ipsec - Overlapping Private Networks

Mon Dec 13, 2010 8:36 pm

Big question is, what is going across the networks? If there is anything that involves dns resolution from one side to the other, you are gonna have to change the ips on one network.
 
marchand
just joined
Topic Author
Posts: 2
Joined: Wed Dec 01, 2010 6:41 pm

Re: Ipsec - Overlapping Private Networks

Tue Dec 14, 2010 10:41 pm

Thanks for the suggestion! I managed to configure it.
 
ssugden
just joined
Posts: 2
Joined: Mon May 12, 2014 3:55 am

Re: Ipsec - Overlapping Private Networks

Sun Feb 21, 2016 2:56 am

Would you mind sharing your working configuration? :)
 
jaytcsd
Member
Member
Posts: 332
Joined: Wed Dec 29, 2004 9:50 am
Location: Pittsboro IN
Contact:

Re: Ipsec - Overlapping Private Networks

Sun Feb 21, 2016 7:01 am

I have 2 RB751s using an EOIP tunnel, both networks are 192.168.100/24.

One router is 192.168.100.1, the other is .10.

I posted my rules in this post.
http://forum.mikrotik.com/viewtopic.php?f=13&t=104238

Who is online

Users browsing this forum: anav, CHUPAPEE, jaclaz, li77616211 and 174 guests