VPN to remote site with same IP schema 1

[kwilsokl]

We have a Sonic 4060 firewall. I have been tasked with allowing a remote company to connect to our site to run an application via VPN. The problem is that the other company has the same IP schema as us.


How do I setup a VPN tunnel so when they open IE and try to browse to 10.1.1.X the IP of the server they need access to .that it is not intercepted by their network an rerouted to one of their machines with the same IP address.


Would a site to site VPN work?


Any ideas would be great

Thanks

 

[joepc]

Maybe you could have them connect to an optinal port that is using a differnet subnet?

 

[Trekk]

That is where I get confused, do you mean a port on their end or mine. It seems like there would need to be a lot of routing to be done on their end. I don’t have access to their routers at their location. I just can seem to picture it on my head how it would work. It doesn’t seem like the packet would even make it to the router since the Ip address they would be going to would not have to be routed.

There server is 10.1.1.62 at their location and ours is 10.1.1.62 at ours.

 

[joepc]

One thing you could do is change one of the subnets if it is not to much trouble. I don't know how many users there are at either of the locations.

If this is not an option maybe you could setup a terminal services server on your network. That way you could create a rule that says any TS connection coming form "other company's external IP address" goes to 10.1.1.62 on your internal network. That way it doesn't really matter what either one of the internal subnets are. This also gives you the ability to lock down TS and restrict the users at the other company to only be able to use that one particular app. You won't have to worry about viruses coming over the VPN, people from another company having access to certain things, etc.

 

[Trekk]

joepc
That is a really good idea, I never thought about using TS.looks like I have alittle bit of work to do on the router.

Thanks for the help!