On Sat, 29 Dec 2001, Michael D. Schleif wrote:

> 
> This must be a common problem ;>
> 
> Suppose that there are two (2) Dachstein-CD firewalls masquerading two
> (2) distinct internal networks that happen to use the same private
> subnets (e.g., 192.168.1.0/24).
> 
> <http://freeswan.org/freeswan_trees/freeswan-1.91/doc/config.html> is
> pretty emphatic:
> 
> ``Note, however, that the two subnets must have distinct addresses. You
> cannot have them both masqueraded to the same range of RFC 1918
> addresses.''
> 
> Again, this must be a fairly common problem.  As you know, we prefer
> *not* to change any network addressing . . .

Sometimes you don't get what you want.

> What to do if both networks are using same private subnet ???

Don't link them.

> What do you think?

I think you are about to touch the back of your heels with the back of
your head.  Stop before you hurt yourself. :)

I also think changing one of the networks is easier than changing both of
them.

---------------------------------------------------------------------------
Jeff Newmiller                        The     .....       .....  Go Live...
DCN:<[EMAIL PROTECTED]>        Basics: ##.#.       ##.#.  Live Go...
                                      Live:   OO#.. Dead: OO#..  Playing
Research Engineer (Solar/Batteries            O.O#.       #.O#.  with
/Software/Embedded Controllers)               .OO#.       .OO#.  rocks...2k
---------------------------------------------------------------------------


_______________________________________________
Leaf-user mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user

Reply via email to