LAN-LAN subnet conflicts
When you connect a BR500 router to a VPN group, the local area networks (LANs) of all routers
in the VPN group are virtually connected to each other. No two routers in the same VPN group
can have the same LAN IP address or subnet address range. If two routers have the same IP
address or subnet address range, VPN clients cannot determine which router is local and
which one is remote (virtual).
Remote VPN is available with Windows clients only.
When a conflict occurs, the VPN server automatically changes one of the conflicting IP
addresses to a non-conflicting one. If you do not want your router's LAN IP address settings
to be changed automatically, make sure that you change your router's settings before you add
it to a VPN group. For more information:
LAN-WAN subnet conflicts
You might also encounter a more subtle IP address conflict: If the LAN IP address of a router
in the VPN group conflicts with another router's wide area network (WAN) IP address, traffic
passes through the VPN in one direction, but is blocked in the other direction. Consider the
following example:
- Site 1: LAN1 192.168.1.1
- Site 2: LAN2 10.0.0.1 | WAN2: 192.168.1.2
You can view your BR500's WAN IP address in the following locations:
- In the BR500 local browser interface under CONNECTION STATUS
- In the Insight Cloud Portal or Insight mobile app under WAN IP
Last Updated:07/07/2025
|
Article ID: 000060860