Several sites with same ip address for local network (ipsec VPN site to site)

[santi10]

I have a stable environment with an ipsec configuration (site to site). The problem I have is that I want to connect another site that has the same internal address as the first site I configured. I don't see how to create a NAT of origin for example or by routing, since they have the same address.

How can I configure FW or NSG rules if they have the same internal addressing?

example:

site 1 - local network 192.168.1.0/24

site 2 - local network 192.168.1.0/24

----- ipsec VPN site to site -------

Thanks

[#2]

I have run into this same issue when connecting a clients network to vendor networks that had overlapping scopes. As of today outside of the Azure firewall I am only aware of the Azure load balancer to be the only other resource having the ability to NAT. The way I accomplished this for the client was to provision a third party firewall to handle the VPN connections then NAT them to the correct subnet in Azure. Let me know if you have questions on that process and I would be happy to help.  @santi10 

[#3]

Hi Bryan!! Thank you for you response me, thanks a lot of. So I think that, the firewall of azure is easy on configuration. What you use thrid party firewall?

Regards

[#4]

I have personally used the Cisco, Sophos, and Sonicwall marketplace offers to configure this. The Azure Firewall is also an option to configure the same behavior for NAT and SNAT. It may come down to personal preference. I would suggest running a trial of one to see which you are most comfortable and familiar with. @santi10