Site to Site VPN

ciscoaltec · ‎12-05-2016

Hi we are setting up Site to Site VPN configuration, tunnel is up and vpn is working properly, but i'm needing some assistance for securing the access.

1. is it possible to restrict network a to access network b?

2. and network b can only access selected server, around 10 - 15 server.?

cisco 2951 router.

thanks,

Mark

nspasov · ‎12-05-2016

Hello Mark, you can do this by defining tunnel ACLs and applying them on the crypto map. On ASAs you can use VPN-Filters. For more info please reference the following links:

VPN ACLs on IOS:

https://popravak.wordpress.com/2011/11/07/cisco-ios-vpn-filter/

VPN-Filters on ASAs:

https://popravak.wordpress.com/2011/11/05/cisco-asa-vpn-filter-as-i-see-it/

I hope this helps!

Thank you for rating helpful posts!