VPN with overlapping subnets (Forti-Meraki)

[ThePro]

Im trying to establish a VPN connection between a Forti (my side) and a Meraki (other party configures this).

I have done VPNs with overlapping subnets between 2 Forti and it works great.

Apparently the Meraki doesnt have a way of doing VirtualIP/IPPools if its not with another Meraki.

Is there any way to make this work? Should I be able to create the a VirtualIP/IPPool for my network specifically for that VPN the same way I do it for when its 2 Forti and just let him use that VirtualIP/IPPool on his configuration?

[Toshi_Esumi]

Why do you need to do that on both sides between two FGTs?

[ThePro]

toshiesumi wrote:

Why do you need to do that on both sides between two FGTs?

Well, I just followed this guide ...

https://cookbook.fortinet...verlapping-subnets-60/

[Toshi_Esumi]

I thought it was only one way access necessary, like remote to server location. The cook book explains it well. If you need both sides be able to access the other side with a different set of IPs(Virtual IP/VIP), you need to set it on the receiving end. Because if you do it with DNAT at the sending side, the translated IPs need to be in a different subnet from the local side has.