Gbit Tech (818) 809-6743
C-7 #1050088  ·  Liability insured  ·  UniFi Certified PartnerNever the cheapest. Built to last.

UniFi Lab 09 Site Magic overlapping spokes

Offices: can't reach each other

Our two offices can't reach each other

Connect both offices, even though they use the same addresses.

Not sure where to start? Check Auto-Scale and NAT Spoke VPNs.

Run: Hub and Spoke · Auto-Scale off · Isolate on · OSPF allow

Spoke to hub

Remote network unreachable

Remote network unreachable

Goal: Fabric up, overlap NATed

Controls Why

Fabric path

Site Manager · SD-WAN

Hub site

192.168.50.0/24 · public IP

Online · networks advertised

File server · hub LAN

Spoke AoverlapSTOP

192.168.1.0/24

Overlap · not differentiated

Spoke BoverlapSTOP

192.168.1.0/24

Overlap · not differentiated

Spoke A client

Initiates to hub file server

Remote network unreachable

Fabric status SD-WAN

CueNowNeed
TopologyHub and SpokeHub and Spoke
Auto-Scale and NATOffOn
Isolate SpokesOnOn
TunnelActiveActive
RoutesMissingInstalled
Spoke to hub resourceFailOK
Spoke to spokeBlockedBlocked

Overlapping subnets · Auto-Scale Off · hub unreachable

Hub LAN resource

192.168.50.0/24 · file server
Subnet192.168.50.0/24
ServiceFile server
Advertised to spokesOn
Reach from Spoke AFail
Spoke to spokeIsolated

Legend

  • Healthy / reach OK
  • Unreachable / overlap conflict
  • Tunnel up, routes missing
  • Fabric up, overlap NATed

Controls

Site Manager fabrics. Hub networks advertised stay On. Win needs Hub and Spoke, Auto-Scale On, Isolate On.

Deployment type
Auto-Scale and NAT Spoke VPNs
Isolate Spokes
VPN to Gateway OSPF

Optional Break C. Active tunnel is not the same as routes installed.

Preset

Hub networks advertised · On

Good to know · info only

Out of scope for this lab

WireGuard catalog OpenVPN / IPsec third party Full DNAT cookbook Mesh performance SD-WAN UDP blocked UDP 20100 to 22100 teaching

Gear in this lab

  • 1 Hub gateway (public IP)
  • 2 Spoke gateways (A + B)
  • 1 Spoke client
  • 1 Hub LAN resource
Change on win: none yet

Config / Site Manager only. Counts only, no prices.

Auto-Scale and NAT Spoke VPNs

Isolate Spokes

A teaching lab, not a quote and not a design for your site. Settings are simplified from the UniFi Network app and Site Manager. No account, and nothing from this lab is saved.