[Openswan Users] Same subnets on both ends

[Tomasz Grzelak]

Marc McGuinness wrote:
> Hello folks,
> 

Hi!

> I was asked to configure VPNs for several subnets. Unfortunately I've
> got two large subnets with the same ip range.
> 
> Example:
> 192.168.0.0/16 --- 194.176.114.16 --- internet --- 84.211.33.9 ---
> 192.168.0.0/16
> 
> I can't just renumber one end as there would be many difficulties
> involved, especially political ones (responsiblities).
> 
> Is there a good way of getting the VPN to work without renumbering a subnet?

In theory - you can NAT source addreses from LAN1 to some virtual IP 
address before encrypting packets, and on the other side make a route to 
the virtual IP address through the tunnel.

But that's only my imagination... You can try this inpractice now.

Good luck!
Tomasz Grzelak