Solved: LAN-to-LAN VPN

alraycisco · ‎09-04-2008

Hi,

I currently have a PIX setup at SiteA and a 1720 router at SiteB. There is a LAN-to-LAN tunnel between the 2 sites. If I was to setup a second tunnel at SiteB terminating on the 1720 router, will it be possible to configure the tunnels so SiteA also has access to the customer VPN tunnel?

I would also want to have VPN tunnels that terminate at the PIX (SiteA) to also be accessible from SiteB.

Would it just be a case of configuring the crypto ACL's for the traffic?

Thanks

Marwan ALshawi · ‎09-04-2008

have a look at the following link will be very usefull

http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a00807f9a89.shtml

good luck

if helpful Rate

View solution in original post

Marwan ALshawi · ‎09-04-2008

have a look at the following link will be very usefull

http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a00807f9a89.shtml

good luck

if helpful Rate

alraycisco · ‎09-04-2008

I think that helps. From my understanding of it, for the customer VPN tunnels that terminate on the 1720 and that need to be accessed from behind the PIX, I should only need to modify the crypto map acl's and the NAT0 acl's. The same interface traffic issue doesn't apply in this case. Is this correct?

grant.maynard · ‎09-04-2008

correct, the 1720 won't have a problem with same interface traffic.