Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

We have a number of site to site VPN tunnels which each have a their own consecutive subnet, for example:

Branch 1 -
Branch 2 -
Branch 3 -
Branch 4 -
Branch 5 -
Branch 6 -

We also have a number of users whom need to create PPTP tunnels while they are roaming. Occasionally those roaming users hit the expected problem that their local network matches that of Branch 1.

Note: All VPN tunnels terminate at Branch 1 and are given an IP in the range.

The network design is the result of a legacy management system of which the network was a product of. I am now working towards adding additional subnets to Branch 1 to terminate the VPN tunnels. So, for example, Branch 1 would have the following subnets:

What I am trying to get my head around is where the conflict is causing problems. Essentially, the question is; if the VPN tunnels terminate to a subnet that does not match that of the roaming users' local network - will the conflict remain due to the subnet existing on the terminating device, even though it's not the actual subnet the roaming client is connecting on?

Company VPN on same subnet as home network

share|improve this question
Possible solution:… – ErikE Nov 23 '13 at 22:43

The problem is that when a users is on a network with a matching subnet (192.168.{0,1,2}.0/24 are the most dangerous ones) the remote address it is trying to hit is a link-local address now, so the routing table is never consulted and the packet is just sent on the wire. Thus, the packet ment to go down the VPN doesn't since the machine thinks that the address it is trying to reach is link-local.

share|improve this answer
So even if they connected to, the fact that they would be requesting devices in the would still cause a problem? It's looking increasingly like we need an IP change. – dannymcc Jul 8 '13 at 16:24
@dannymcc correct. If the node they are trying to connect to is on the same IP range, then they will never get there. – Zypher Jul 8 '13 at 16:52

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.