The scenario: I work in a MSP that manages all the IT enviroment of 50 customers. Some customers are full managed by us (servers, network, firewall, etc). Others are partially managed (just the database server or just the web server). We access those clients in different ways, like a SSH, TS, Citrix, VPN client, etc.
What we want to do is: Connect to our customers with VPNs site-to-site (using IPSec). We have a Sonicwall firewall that can have up to 80 IPSec tunnels. By doing this, we will be able to use centralized management tools like Puppet, SCCM, logging, etc.
The problem: We have a range like 192.168.0.0/24. Other customers have this range too. Other 3-5 customers also have a 192.168.1.0/24 range.
So, the question is:
- How can we manage this VPN with overlap address? How NAT would help me with this?
- Is this a good way to work? Do you guys have similar scenarios?
- If it's not, what could we do? What you guys suggest?
Thank you very much!