Interview - VPN Question

GOGONUT2KGOGONUT2K Member Posts: 12 ■□□□□□□□□□
in CCNA Security
Hello guys!

I'm looking for a quick answer. I had an interview and I need to know what is the correct answer.

The question was :

"We have two companies A & B. Both have 100 users in the subnet 192.168.1.0/24 range (same allocation of ip's). Can we create a VPN connexion between the 2 companies? It will work having the same subnet ? Or do we have to change the entire allocation ip scheme to one of the companies ? "

10x
· Share on FacebookShare on Twitter

Comments

  • TheNewITGuyTheNewITGuy Member Posts: 169 ■■■■□□□□□□
    Just tell them you need to nat over the vpn - either side is fine, but you'll need to change your interesting traffic acls

    Site A-> 192.168.1.0/24 ----VPN---- Site B - 192.168.2.0/24 -NAT- 192.168.1.0/24


    but no it wont work with the same proxy and no you dont have to change the IP scheme
    · Share on FacebookShare on Twitter
  • SephStormSephStorm Member Posts: 1,731 ■■■■■■■□□□
    I have a suspicion you are not a new IT guy.
    http://www.ethicalhacker.net/forums/index.php - sectestanalysis.blogspot.com
    · Share on FacebookShare on Twitter
  • RouteMyPacketRouteMyPacket Member Posts: 1,104
    Sure we can, with NAT but the "new" IT Guy hit it on the head. Here is a good link for you anyway

    http://www.cisco.com/en/US/tech/tk648/tk361/technologies_configuration_example09186a0080093f30.shtml
    Modularity and Design Simplicity:

    Think of the 2:00 a.m. test—if you were awakened in the
    middle of the night because of a network problem and had to figure out the
    traffic flows in your network while you were half asleep, could you do it?
    · Share on FacebookShare on Twitter
  • TheNewITGuyTheNewITGuy Member Posts: 169 ■■■■□□□□□□
    SephStorm wrote: »
    I have a suspicion you are not a new IT guy.

    Just started yesterday :P
    · Share on FacebookShare on Twitter
  • GOGONUT2KGOGONUT2K Member Posts: 12 ■□□□□□□□□□
    Thank you for your answers!

    I didn't gave them the correct answer. I said it is possible with changing the ip addresses. I am still waiting for the feedback from the recruiter.

    10x
    · Share on FacebookShare on Twitter
  • CingularCingular Member Posts: 81 ■■■□□□□□□□
    SephStorm wrote: »
    I have a suspicion you are not a new IT guy.

    Got a good laugh out of this! Thanks'.
    cissp, pcnse, ccnp, ccnp security, nse4
    ---

    "It's too bad she won't live. But then again, who does?" - Gaff 

    · Share on FacebookShare on Twitter
Sign In or Register to comment.