Tailscale Site to Site VPN Subnet ranges

Options
Gibsonmb
Gibsonmb Posts: 9 image  Freshman Member
First Comment Friend Collector First Anniversary
in Security

Can Zyxel confirm that each end of the VPN needs to be a completely different block of subnet or can it be different subnets within the same block.

So, can the subnet at one end be 192.168.0.xxx and the other end be 192.168.1.xxx? Or do they need to be 192.168.xxx.xxx at one end and 172.16.xxx.xxx at the other? thanks…. Mike

Accepted Solution

  • Ahleee
    Ahleee Posts: 4 image  Freshman Member
    First Answer First Comment
    edited February 18 Answer ✓

    You can use different subnets within the same block. For example, having 192.168.0.xxx on one end and 192.168.1.xxx on the other is fine. The key is that the two subnets don’t overlap, each device on one side must have a unique address range that doesn’t conflict with the other side. Using completely different blocks like 192.168.xxx.xxx and 172.16.xxx.xxx also works, but it’s not strictly necessary as long as there’s no overlap.

All Replies

  • Gibsonmb
    Gibsonmb Posts: 9 image  Freshman Member
    First Comment Friend Collector First Anniversary

    Anybody?

  • Ahleee
    Ahleee Posts: 4 image  Freshman Member
    First Answer First Comment
    edited February 18 Answer ✓

    You can use different subnets within the same block. For example, having 192.168.0.xxx on one end and 192.168.1.xxx on the other is fine. The key is that the two subnets don’t overlap, each device on one side must have a unique address range that doesn’t conflict with the other side. Using completely different blocks like 192.168.xxx.xxx and 172.16.xxx.xxx also works, but it’s not strictly necessary as long as there’s no overlap.

  • Gibsonmb
    Gibsonmb Posts: 9 image  Freshman Member
    First Comment Friend Collector First Anniversary

    many thanks, that's what I needed to know

Categories

Security Help Center

EnglishTiếng ViệtРусскийไทย中文（台灣）