VPN configuration site to site

Unanswered Question
Jul 22nd, 2009

Dear All,

1. We plan to create a Site to site vpn tunnel between another company and our head office. they are having the same Lan network range as ours. both location are being using the same network. Now its not advise to change the IP in any location. is there any way i can configure the site-site vpn and establish the connectivity?

2. Also plan to configure the client to site VPN (Remote access Vpn) tunnel authentication through Certificates. we have an internal Windows server which is configured as certifictae server.we can download CA certificates from it. but this server is not been natted to public ip.can i use this server for remote access vpn ? for remote access vpn the certificate server should be available in the net or it can be in the internal network. do we need to install the certificate in PIX ?

Please help me to configure the same.


I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (1 ratings)
Farrukh Haroon Thu, 07/23/2009 - 00:55

1. Yes you can do this be employing NAT for the overlapping space, please have a look at:


(Copy the whole URL above, as the forum is breaking the link)

2. The certificates can be generated and installed on the endpoints without requiring that you publish you CA server over the internet (NAT). However if you want to do SCEP enrollment etc. over the internet you need to open it up. This all depends on your security policy, have a look at this link for configuration assitance:





This Discussion