Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I am looking for a way to allow a client Win7 computer, which connects to our California office's Cisco ASA 5510 over an IPSec VPN connection to then be able to connect to a computer in our chicago office which is itself connected through another Cisco ASA router to california.

It appears that we are unable to route client vpn connections between each other, and I cannot find any guidance on how to enable this. Let me know if this is possible / what needs to be done.

share|improve this question

migrated from Mar 16 '11 at 16:00

This question came from our site for computer enthusiasts and power users.

Just did some googling to see if i could help and i found this thread.… thought it might help. – Zencyl Mar 16 '11 at 5:00

I take it that the client computer is using the the Cisco VPN Client to connect to a Remote Access VPN on the California ASA. Then the California ASA connects to the Chicago ASA via a Site-to-Site VPN.

The California ASA must include the IP network that is being used in the Remote Access VPN as part of the Local Network. The Chicago ASA mustinclude the IP network that is being used in the Remote Access VPN as part of the Remote Network. If I remember correctly, these are set in your Crypto Maps.

If you are doing Split Tunneling on the Remote Access VPN, you also need to make sure that the Chicago networks are configured to be tunneled through the California ASA.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.