I have a site to site vpn that works fine between Cisco 871 and 2801, however I need all traffic originating from the remote site destined to the internet to go through the host sites Internet access. I've worked the the ACLs and have got it working partially. The traffic goes the way I want it but some web sites work while others will not. Any ideas?
As long as IP connectivity is stable through the hub PAT router and DNS is working correctly, you will probably want to look into MTU/MSS. On the physical or logical VLAN interface facing the clients, add the "ip tcp adjust-mss 1360" command and then test again.
We have configured the outside and inside Interface with official ipv6 adresses, set a default route on outside Interface to our router, we also have definied a rule , which also gets hits, to permit tcp from inside Interface to any6.
In Syslog I also se...