Want to setup Tunnelling between 2 routers at diff sites

Unanswered Question
Jul 6th, 2009
User Badges:

Hi Experts,

I would like to setup something like the below Router connection.


| |

PC A - Router A - Router B - Router C - Router D - PC D

PC - stands for computer.

I would like to do a tunnelling between PC A and PC D, meaning in the process PC A cannot connect to PC B or PC C, only to PC D.

P/S: Sorry, diagram not ilustrate correctly. PC B connected to Router B's LAN, and PC C connected to Router C's LAN.

Any Configuration or examples I can use?

Thanks in advance.


  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Richard Burts Mon, 07/06/2009 - 22:45
User Badges:
  • Super Silver, 17500 points or more
  • Hall of Fame,

    Founding Member

  • Cisco Designated VIP,

    2017 LAN, WAN


Perhaps I am not understanding something about your environment. But I am not sure that tunneling would necessarily provide the result that you want.

It would be easy to set up a tunnel between routerA and routerD. And you could set up routing that would access PC D via the tunnel from routerA and that would access PC A via the tunnel from routerD. But that would not prevent PC A from accessing PC B or PC C. To prevent that access you would need to configure an access list on routerA to prevent access from PC A to PC B and PC C (and similar access list filtering on routerD). And once you have the access list filtering in place, then why do you need the tunnel?

If there is something that I have not understood then perhaps you can clarify this?



cindylee31 Mon, 07/06/2009 - 23:01
User Badges:


Thanks for your reply..:)

Well, the scenario is like this LAN A and LAN D are vendor's LAN, but LAN B and LAN C are internal network.

We want to have tunnel so that the vendor's PC wont be able to come in to our LANs.

We want them to ride on our WAN Connection but at the same time wanna prevent them from coming to our network.

Hope this clarifies.

Thanks again,


Leo Laohoo Tue, 07/07/2009 - 02:23
User Badges:
  • Super Gold, 25000 points or more
  • Hall of Fame,

    The Hall of Fame designation is a lifetime achievement award based on significant overall achievements in the community. 

  • Cisco Designated VIP,

    2017 LAN, Wireless

Private VLAN Catalyst Switch Support Matrix


Securing Networks with Private VLANs and VLAN Access Control Lists


Hope this helps.


This Discussion