VPN - question about connecting through more than 1 tunnel
We have a router that has VPN connections to different partners to our company. Remote Access VPns have been used on the PCs that are connecting to the different partners of our company.
There have been problems like this, ie putting a watch dog and a cisco vpn client both on the router has led to blue-screens on the PCs.
The current idea is to put various site-to-site tunnels on the router (default gateway of the PC clients that connect to the partners). My question is... how do our PCs get DHCP addresses on the visiting networks, once the tunnels are up? I guess I'm alittle confused about how the addressing for the PCs on our end is going to work.
Re: VPN - question about connecting through more than 1 tunnel
With site to site VPN's you generally don't allocate the IP addresses from the remote site ie. it's not like client VPN's where the PC gets an address once it has connected.
With site-to-site you use your PC's existing addresses. If there is a conflict between these addresses and your partners addresses you can NAT you client addresses before you send them down the tunnel.
Table of ContentsIntroductionVersion HistoryPossible Future
UpdatesDocuments PurposeNAT Operation in ASA 8.3+ SectionsRule Types
Network Object NATTwice NAT / Manual NATRule Types used per SectionNAT
Types used with Twice NAT / Manual NAT and Network Obje...
[toc:faq]Introduction:This document describes details on how NAT-T
works.Background:ESP encrypts all critical information, encapsulating
the entire inner TCP/UDP datagram within an ESP header. ESP is an IP
protocol in the same sense that TCP and UDP are I...