Using VPN Pool for Different Client VPN Profile

[raj_bjs77]

Hi,

Need to confirm on this. Can we use same IP pool for two different Client VPN profile on ASA.

There should not be any IP conflict if users connects using both profile.

Thanks

R

[rizwanr74]

Yes you can, but it is extremely not recommended and it is highly recommended to use complete different network all together and it become easier to nat.

Hope that answers your question.

Pls rate helpful post.

thanks

[raj_bjs77]

Hi,

Thanks for that..Why is that not recommended. I am not going to do any NAT sort..Just want to use same pool as this pool is already allowed in all my network ACLs

Thanks

[rizwanr74]

Well, network and firewall management are on going process, today you have something but tomorrow you will have something else.

So, make your life ease for you and I am telling you from my experience I have been through with this number of clients when you have overlapping ip scopes, that is when your nightmare begins.

If you have /24 segment, break it down to 2 or more.

I do not want to be "hard on" you. You want to reinvent the wheel. Sure go for it.

I hope that answers your question or concern.

thanks