Tailscale Site to Site VPN Subnet ranges

Gibsonmb

Can Zyxel confirm that each end of the VPN needs to be a completely different block of subnet or can it be different subnets within the same block.

So, can the subnet at one end be 192.168.0.xxx and the other end be 192.168.1.xxx? Or do they need to be 192.168.xxx.xxx at one end and 172.16.xxx.xxx at the other? thanks…. Mike

Ahleee

You can use different subnets within the same block. For example, having 192.168.0.xxx on one end and 192.168.1.xxx on the other is fine. The key is that the two subnets don’t overlap, each device on one side must have a unique address range that doesn’t conflict with the other side. Using completely different blocks like 192.168.xxx.xxx and 172.16.xxx.xxx also works, but it’s not strictly necessary as long as there’s no overlap.

Gibsonmb

Anybody?

Ahleee

You can use different subnets within the same block. For example, having 192.168.0.xxx on one end and 192.168.1.xxx on the other is fine. The key is that the two subnets don’t overlap, each device on one side must have a unique address range that doesn’t conflict with the other side. Using completely different blocks like 192.168.xxx.xxx and 172.16.xxx.xxx also works, but it’s not strictly necessary as long as there’s no overlap.

Gibsonmb

many thanks, that's what I needed to know