VPN - Same IP's
Bookmark this page:
 Yahoo!
 Google
 Windows Live
 del.icio.us
 digg
 Netscape
|
|
|||||||||||||||||||
|
Posted by on November 17, 2005, 10:03 am
Please log in for more thread options Have a stupid question ... We have a vpn at work using a cisco Pix and the network has an ip range of 192.168.1.1, etc ... I have several users who are logging into the vpn from home computers. Some of these computers I have had to change the ip address range to be different then the work network range to avoid conflict ... I would use 192.168.0.1 range This seems to work ok so far ... have a question on the effects of several home users logging in with the same ip address though. What happens when several home users that have been assigned 192.168.0.1 by their home routers all log into the vpn at the same time? Does this create any conflicts or is this not even a factor when using vpn? thanks, JL | |||||||||||||||||||
|
Posted by Stephen J. Bevan on November 17, 2005, 10:37 pm
Please log in for more thread options I don't know about a PIX specifically but the following are possibilities :- a) the PIX would reject the connection of the *second* user using 192.168.0.1 to avoid the possibility of a routing conflict. b) the PIX will allow multiple users to connect with 192.168.0.1 but this will result in a routing conflict so either all traffic to 192.168.0.1 will go to one of the users or it will flap back and forth causing TCP connections to fail and traffic to be lost. c) the PIX has been configured to dynamically NAT all remote subnets to another IP range to ensure that everyone appears to have a unique subnet and so avoid a routing conflict. | |||||||||||||||||||
|
Posted by Simon on November 18, 2005, 2:45 am
Please log in for more thread options jslarose@cheerful.com wrote:
> Hi,
I can't see a problem as each of the home users will have had their 192
> > Have a stupid question ... > > We have a vpn at work using a cisco Pix and the network has an ip range > of 192.168.1.1, etc ... I have several users who are logging into the > vpn from home computers. Some of these computers I have had to change > the ip address range to be different then the work network range to > avoid conflict ... I would use 192.168.0.1 range > > This seems to work ok so far ... have a question on the effects of > several home users logging in with the same ip address though. What > happens when several home users that have been assigned 192.168.0.1 by > their home routers all log into the vpn at the same time? Does this > create any conflicts or is this not even a factor when using vpn? > > thanks, > > JL > local addresses natted to the wan address of their router, it's this address the pix will see the tunnel request coming from, not the 192 one. Simon | |||||||||||||||||||
|
Posted by on November 18, 2005, 10:36 am
Please log in for more thread options Wasn't quite sure what it would do. What I did find out was that the
home users could not use the 192.168.1.x range ... it would allow the vpn to connect but no traffic would actually pass. The problem was fixed once I moved the home users onto the 192.168.0.x range. Just wanted to make sure that if they happened to all have the same address on their home machine that it wouldn't create an issue ... I guess it wouldn't if it got natted to the wan of the router thanks for the replies .. I appreciate it ... | |||||||||||||||||||
| Similar Threads | Posted |
| VPN - Same IP's | November 17, 2005, 10:03 am |
> several home users logging in with the same ip address though. What
> happens when several home users that have been assigned 192.168.0.1 by
> their home routers all log into the vpn at the same time? Does this
> create any conflicts or is this not even a factor when using vpn?