Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I am looking for a way to allow a client Win7 computer, which connects to our California office's Cisco ASA 5510 over an IPSec VPN connection to then be able to connect to a computer in our chicago office which is itself connected through another Cisco ASA router to california.

It appears that we are unable to route client vpn connections between each other, and I cannot find any guidance on how to enable this. Let me know if this is possible / what needs to be done.

share|improve this question
    
Just did some googling to see if i could help and i found this thread. serverfault.com/questions/111406/… thought it might help. –  Zencyl Mar 16 '11 at 5:00
add comment

migrated from superuser.com Mar 16 '11 at 16:00

This question came from our site for computer enthusiasts and power users.

1 Answer

I take it that the client computer is using the the Cisco VPN Client to connect to a Remote Access VPN on the California ASA. Then the California ASA connects to the Chicago ASA via a Site-to-Site VPN.

The California ASA must include the IP network that is being used in the Remote Access VPN as part of the Local Network. The Chicago ASA mustinclude the IP network that is being used in the Remote Access VPN as part of the Remote Network. If I remember correctly, these are set in your Crypto Maps.

If you are doing Split Tunneling on the Remote Access VPN, you also need to make sure that the Chicago networks are configured to be tunneled through the California ASA.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.