IPsec VPN based on hub and spoke topology

[a_ymeri]

I need an implementation scenario for an IPsec VPN based hub and spoke topology with 100 spokes.

all nodes are FortiGate and I want to use only one phase1 (Hub configuration--remote gw as Dialup User) 

What happens if some of the spokes are in the same subnet? What to do in this case if I can't change the remote subnets?

Has anyone tested, any similar scenario?

Adriana Ymeri 

………………………………

COMMUNICATION PROGRESS sh.p.k.  Tiranë, Albania

mob: +355 696012014 | email a.ymeri@commprog.com

[Abdulaziz_Alatar]

Hello Adriana,
You enroll with conflict . you need use overlapping subnet (NAT)..