I have a site A which consists of the following IP address and subnets:

  1. (internal)
  3. BGP tunnel tunnel IP with
  4. Cloud IP address of

I would like to do a Site-to-Site VPN from Site B to Site A.

Site B consist of the IP address block:

My question is:

If I do a Site-to-Site VPN from B to A(DMZ) will it cause any IP conflicts? Or, do I need to do something to prevent B) to go to the router?


  • At site b, do you use any addresses in the range - – Ron Trunk Jan 5 '18 at 2:53
  • Hi Ron, yes there is one IP with – user3612001 Jan 5 '18 at 7:12
  • You can NAT the local subnet ( at Site B to another subnet when doing VPN tunnel between Sites A and B. – Hung Tran Jan 5 '18 at 9:10
  • Did any answer help you? If so, you should accept the answer so that the question doesn't keep popping up forever, looking for an answer. Alternatively, you could provide and accept your own answer. – Ron Maupin Apr 1 '18 at 19:25

Question A: with non-conflicting adresses/networks there will be no problem

Question B: you can set up all routes through the tunnel but on site A you need to make sure that the already present has a lower metric/higher priority than the to site B. That means that you can't reach B's from site A. Solving this would involve destination NAT which is rather messy.

Making A's reachable from site B will also be tricky and messy. Do really need it? Is renumbering an option?

  • Hi Zac67, Thank for your reply. i wish i could change the IP addresses =( – user3612001 Jan 5 '18 at 8:12
  • Hi, If right now from site B to site A (DMZ)( network and in the site to site settings i only allow to enter my subnet. Will this still cause a IP conflict with BGP tunnel IP address? – user3612001 Feb 2 '18 at 9:15

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.