Our data center network is:


I want to have our sites use 10.X.X.X/24 (Site Number, VLAN, host)


Site 30

10.30.10.X/24 10.30.20.X/24

10.X would be corporate network 20.X would be voip

Site 40

10.40.10.X/24 10.40.20.X/24

10.X corporate network 20. VOIP

They will make a site to site connection via CIsco firewall to our datacenter to gain access to domain ,firewall, WSUS server etc...

I was told I can't use this scheme as site to site won't work. But I don't see anything wrong with this setup? AM I missing something?

Firewall tunnel is setup like this

Site A Networks

Data Center



VLAN Network

Group-Object SiteName CorporateNetwork VLAN Network

nat (inside,outside) 1 source static SiteName SiteName destination static SiteName SiteName no-proxy-arp route-lookup

object network CorporateNetwork nat (any,outside) dynamic interface etc....

closed as too broad by Ron Maupin Mar 5 at 19:54

Please edit the question to limit it to a specific problem with enough detail to identify an adequate answer. Avoid asking multiple distinct questions at once. See the How to Ask page for help clarifying this question. If this question can be reworded to fit the rules in the help center, please edit the question.

  • 2
    Why did "they" tell you it wouldn't work? The addressing plan seems fine, but you've left out details such as how the site to site connections are set up. – Ron Trunk Mar 5 at 1:11
  • IKEv2/IPsec via Cisco ASA on both ends. – Fiend Busa Mar 5 at 1:21
  • And how will you address the site-to site links? – Ron Trunk Mar 5 at 1:28
  • Per VLAN so with and then against etc.. – Fiend Busa Mar 5 at 1:30
  • I'm sorry, that doesn't make sense. Maybe a simple diagram? – Ron Trunk Mar 5 at 1:31