Dial-up VPN client on same subnet as trust interface fails

[zinjanthropus]

I have setup LAN-LAN or dial-up to LAN VPN's on different subnets and these all work just great. I cannot figure out how to get a client on the same subnet behind a NAT to connect to the Netscreen in NAT? It is obvious that if I am trying to ping say 192.168.10.1 on the trusted side of the Netscreen and my external client IP is 192.168.10.100 that it will not work because with a mask of say 255.255.255.0 the client and the Netscreen both think they are talking to a local address. There is probably a way around this but I cannot seem to get it to work. The NS remote is 7.0 and the Netscreen is a 5. Thanks for any help.

 

[Packet7]

Hello,

I have never done this before, but I think you should research a Layer 2 Transparent approach. This allows for overlapping subnets, and can be used for VPN usage. Just an idea.

Rgds,

John