Discussion Locked

VPN router to router issue

0 helpful
5 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
Problem Description: I have 3 sites (A, B, and C). VPN between A and B is already established. (A----B----C). Let say I want to implement VPN so C can access resources in A, but I don't want to establish the tunnel between C and A. I want C to get to A thru B by router to router VPN. Can you give me instructions how to do it including detail docs? By the way, this vpn is based on site to site router to router vpn.

5 replies

by mshavrov

There is no problem in your scenario. First of all, you should be sure that you have routing between A and C. I mean, that RouterC should know, that resources in LAN-A may be accessible through RouterB. If you have direct route between RouterC and RouterA, but you want to use RouterB as "Connection Point", probably you should use static routing.

Second, if you have not all traffic encrypted between RouterB and RouterA (check crypto access-lists on RouterB), you should decide, which traffic from RouterC you should encrypt (put into VPN Tunnel), and which should go unencrypted (or go to Internet, for example). Then you should just add required network addresses and protocols into RouterB and RouterA existing access-lists (note, that access-lists are "mirrored").

If you have more question, contact me directly at ccna@inbox.ru

Good luck.

by shmaltz

As long as routes exist between point A and C there shouldn't be a problem. In some cases you might have to setup static routes in order to create a route from A to C and C to A.

This discussion is closed to new replies.