- Posts: 5
- Thank you received: 0
Checkpoint VPN IP Address Conflict
20 years 6 months ago #3587
by FreeFall
Checkpoint VPN IP Address Conflict was created by FreeFall
We have an office in the Virginia that we're planning to connect via VPN to our office here in Manila. Problem is that our office in Virginia is using 192.168.1.x IP block and one of our other office's in Vietnam which is already connected to use via VPN is already using the same IP block and our Checkpoint firewall is reporting that its seing an IP conflict on our network.
Is there a way to get around this problem?
Thanks in advance for your help.
Is there a way to get around this problem?
Thanks in advance for your help.
20 years 6 months ago #3598
by tfs
Thanks,
Tom
Replied by tfs on topic Re: Checkpoint VPN IP Address Conflict
I'm not sure how you are going to get around the problem.
The VPN tunnel will use both your Private address and your Public address to find out how to address the packets.
The problem is you have something like:
192.168.122.1 via 66.22.15.23 and
192.168.122.1 via 120.5.15.12
But you are asking to connect to 192.168.122.1. The problem is how is the firewall going to know whether you want to go to 66.22.15.23 or 120.5.15.12.
What I would do, since these are private networks, is change one of the LANs (the easiest one) to another subnet. For exampe,using my above subnets, change one of the 192.168.122.x subnets to 192.168.120.x. Unless you have hardcoded something to use the 192.168.122 subnet - it should be pretty clean, especially if you are using DHCP. Then it's a snap.
Hope that helps,
The VPN tunnel will use both your Private address and your Public address to find out how to address the packets.
The problem is you have something like:
192.168.122.1 via 66.22.15.23 and
192.168.122.1 via 120.5.15.12
But you are asking to connect to 192.168.122.1. The problem is how is the firewall going to know whether you want to go to 66.22.15.23 or 120.5.15.12.
What I would do, since these are private networks, is change one of the LANs (the easiest one) to another subnet. For exampe,using my above subnets, change one of the 192.168.122.x subnets to 192.168.120.x. Unless you have hardcoded something to use the 192.168.122 subnet - it should be pretty clean, especially if you are using DHCP. Then it's a snap.
Hope that helps,
Thanks,
Tom
20 years 6 months ago #3617
by FreeFall
Replied by FreeFall on topic Re: Checkpoint VPN IP Address Conflict
Hi,
Thanks for the reply, and yes your assumption on what I wanted to do is correct. Iwas searching the net for the past two days and stumble on NAT traversal capabilities of Firewalls.
Do you think this would help me solve my problem?
Thanks again in advance
Thanks for the reply, and yes your assumption on what I wanted to do is correct. Iwas searching the net for the past two days and stumble on NAT traversal capabilities of Firewalls.
Do you think this would help me solve my problem?
Thanks again in advance
Time to create page: 0.115 seconds