Can you use the same client vpn subnet for 2 vpn settings on the MX?

[Announcer]

I have Client vpn ipsec setup with a specific subnet (let's say 192.168.33.0).  I am configuring the Ciscon AnyConnect client vpn and am wondering if I can use the same subnet as the other one?  Or Do I have to create a new client vpn subnet that is different from the ipsec subnet?

[alemabrahao]

You need to create a new subnet.

[alemabrahao]

Just to be clear, if you try to use the same subnet you will get an error message.

[RWelch]

I don't think it will allow you to use the same subnet, but if it does allow you to, I would encourage you to use a separate subnet to avoid IP address and routing conflicts.

[Announcer]

Thanks all, seems like I need to create a new one.

[AlexL1]

Hi Announcer,

The MX treats client IPsec VPN and AnyConnect VPN subnets as separate pools and routes client traffic accordingly. They can coexist on the same MX, but their subnets should be distinct to avoid conflicts.

In addition, as alemabrahao mentioned, Meraki Dashboard will display an error message:
"There were errors in saving this configuration:

• The client vpn subnet cannot overlap with the AnyConnect VPN subnet."

In this case, I tried to use the same subnet range.

If you have any further questions, please don't hesitate to contact us.

If you found this post helpful, please give it kudos.
If my answer solved your problem, click "accept as solution" so that others can benefit from it.