Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

The problem I am having is I have a point to point tunnel from site A to site B. Remote users connect to site A via VPN. I would like them to be able to send traffic over the tunnel to site B. Is this possible to do? The Tunnel sets up fine and I can connect to the VPN just fine ... I think I have added all of the rules to allow traffic to pass. A google search seemed to indicate that there may be problems because this is the same interface. Let me know if segments from the router configuration would be useful. Thanks in advance for the help.

share|improve this question
Are you saying that the user-to-site VPN is terminated at the same device that terminates the site-to-site VPN, or is the user-to-site VPN terminated by some device behind the site-to-site VPN router? – Evan Anderson Jun 10 '09 at 16:52
They both terminate on the the same device and interface – trent Jun 10 '09 at 17:13

An IOS router ought to handle that fine. A PIX w/ OS version prior to 7 isn't. A PIX w/ OS 7 or an ASA should able to handle it, but you'll need to put in a "same-security-traffic permit intra-interface" in the config (at least on an ASA) to handle it.

share|improve this answer
Its running IOS 12.4 so it sounds like it should be possible – trent Jun 10 '09 at 17:40

I think I have found the config that I needed to do that here. I'll Try to remember to post after I get it debugged and let people know if it worked.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.