TexasCHLforum.com

Charles,

I would not suggest using the Net44 addresses with a VPN solution. They are not necessary, and will only add complexity in administering and on-boarding new VPN connections.

I think the issue you are running into is that you are putting everything on the same network. Site to site VPN tunnels usually connect different networks. An IP address is split into a network address and a device address. The subnet mask is what determines how this is split. The simplest example is a subnet mask of 255.255.255.0. For the IP address 192.168.73.2, the network address is 192.168.73 and the device address is 2. If you then take the IP address 192.168.73.3, that will be on the same network, but has a different device address. For your VPNs connections, you want different networks. So site 1 would have a network address of 192.168.73 and site 2 could have a network address of 192.168.74. The routers for each site would have addresses like 192.168.73.2 and 192.168.74.2. The link below is a sample network diagram of the VPN connections to 3 different sites.

https://centretech.sharefile.com/d-s286c8c3cdfa43e78

Using a subnet mast of 255.255.255.0 (or some times written as /24 after the IP address) is good for easily explaining the layout, but probably a lot more IPs than are needed. I would suggest using 255.255.255.248 or 255.255.255.240 as the subnet mask, depending on how many IPs would be needed at each site.