topic Re: Overlapping Proxy ID"s in General Topics

Overlapping Proxy ID"s

mjensen40400 — Fri, 24 Jul 2020 17:46:34 GMT

I have a IPSEC site to site VPN with a Check Point firewall. In the Palo Alto I have networks / proxy ID's that overlap each other? Can this cause issues?

For example I have:

Local Remote

192.168.50.0/24 10.241.8.0/24

192.168.50.0/24 10.241.0.0/16

Because 10.241.8.0 /24 is included in 10.241.0.0/16 is something like this know to cause problems?

Re: Overlapping Proxy ID"s

reaper — Sun, 26 Jul 2020 20:38:18 GMT

are these both to the same Checkpoint?

if so, both ends can (should) delete the proxyID with the 10.241.8.0/24 subnet as this serves no purpose

it shouldn't cause any issues, but why risk it (if one end decides the /24 has precedence and the other prefers the /16, traffic could potentially get discarded)