IPsec tunnels to multiple peers with overlapping remote networks

[RaymondLeeDOT]

Say I have site-to-site IPsec tunnels from my Palo to 2 different peers.  How do I handle the case when the 2 peers have the same or overlapping networks?  Do I ask one of the peers if they can NAT their network to something that doesn't conflict with my other peer?  What if neither peer is able to NAT?

 

[JayGolf]

Hi @RaymondLeeDOT ,

It would be easiest for you if one of the peers can handle NAT on their end and use a subnet that works for your environment. If none of the peers can handle NAT, you'll have to create 2 separate subnets for each peer and take care of the NAT for their connections.