The problem I am having is I have a point to point tunnel from site A to site B. Remote users connect to site A via VPN. I would like them to be able to send traffic over the tunnel to site B. Is this possible to do? The Tunnel sets up fine and I can connect to the VPN just fine ... I think I have added all of the rules to allow traffic to pass. A google search seemed to indicate that there may be problems because this is the same interface. Let me know if segments from the router configuration would be useful. Thanks in advance for the help.
-
Are you saying that the user-to-site VPN is terminated at the same device that terminates the site-to-site VPN, or is the user-to-site VPN terminated by some device behind the site-to-site VPN router?– Evan AndersonJun 10, 2009 at 16:52
-
They both terminate on the the same device and interface– trentJun 10, 2009 at 17:13
Add a comment
|
2 Answers
An IOS router ought to handle that fine. A PIX w/ OS version prior to 7 isn't. A PIX w/ OS 7 or an ASA should able to handle it, but you'll need to put in a "same-security-traffic permit intra-interface" in the config (at least on an ASA) to handle it.
I think I have found the config that I needed to do that here. I'll Try to remember to post after I get it debugged and let people know if it worked.