Forum Discussion

santi10's avatar
santi10
Copper Contributor
Aug 29, 2019

Several sites with same ip address for local network (ipsec VPN site to site)

I have a stable environment with an ipsec configuration (site to site). The problem I have is that I want to connect another site that has the same internal address as the first site I configured. I don't see how to create a NAT of origin for example or by routing, since they have the same address.

How can I configure FW or NSG rules if they have the same internal addressing?


example:

 

site 1 - local network 192.168.1.0/24

site 2 - local network 192.168.1.0/24

 

----- ipsec VPN site to site -------

 

Thanks

 

azure
networking

3 Replies

Sort By
  • Bryan Haslip's avatar
    Bryan Haslip
    Iron Contributor
    Aug 31, 2019

    I have run into this same issue when connecting a clients network to vendor networks that had overlapping scopes. As of today outside of the Azure firewall I am only aware of the Azure load balancer to be the only other resource having the ability to NAT. The way I accomplished this for the client was to provision a third party firewall to handle the VPN connections then NAT them to the correct subnet in Azure. Let me know if you have questions on that process and I would be happy to help.  santi10 

    • santi10's avatar
      santi10
      Copper Contributor
      Sep 04, 2019

      Hi Bryan!! Thank you for you response me, thanks a lot of. So I think that, the firewall of azure is easy on configuration. What you use thrid party firewall?

       

      Regards

      • Bryan Haslip's avatar
        Bryan Haslip
        Iron Contributor
        Sep 04, 2019

        I have personally used the Cisco, Sophos, and Sonicwall marketplace offers to configure this. The Azure Firewall is also an option to configure the same behavior for NAT and SNAT. It may come down to personal preference. I would suggest running a trial of one to see which you are most comfortable and familiar with. santi10 

Resources