We've recently added a tunnel to a third office and wish to allow traffic from Tunnel 1's office and Tunnel 2's office as well as traffic from the datacenter to have access to Tunnel 3's office. An ASA 5510 is terminating all three of these tunnels in the datacenter. Is it possible to accomplish this using only the ASA by adding the following traffic selections to tunnels 1 and 2 (to the datacenter) and adding Tunnel 3?
In essence allowing both office 1 and 2 to reach office 3 bi-directionally through the datacenter's ASA. It's not currently possible to terminate tunnels between offices 1 and 2 and office 3 directly.
Other useful information:
Office 2 uses a Watchguard and adding the additional traffic selection to the existing tunnel definition results in the original tunnel re-establishing but I never see the tunnel allowing traffic to office 3 complete phase 2 (QM FSM Error).
I have no control (directly) over the configuration of the device in office 3 (YET).
Table of ContentsIntroductionVersion HistoryPossible Future
UpdatesDocuments PurposeNAT Operation in ASA 8.3+ SectionsRule Types
Network Object NATTwice NAT / Manual NATRule Types used per SectionNAT
Types used with Twice NAT / Manual NAT and Network Obje...
[toc:faq]Introduction:This document describes details on how NAT-T
works.Background:ESP encrypts all critical information, encapsulating
the entire inner TCP/UDP datagram within an ESP header. ESP is an IP
protocol in the same sense that TCP and UDP are I...