Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Community Member

tunnel traffic between two IPsec LAN-to-LAN tunnels on ASA 5520?

Is it possible to tunnel traffic between two IPsec LAN-to-LAN tunnels, or between one IPsec tunnel and one SSLVPN tunnel

(AnyConnect client) with the ASA 5520?

E.g. We have two IPsec LAN-to-LAN tunnels. Is this setup possible:

Tunnel 1. Local subnet: B. Remote subnet: A.

Tunnel 2. Local subnet: A. Remote subnet: B.

..and have traffic flow between subnets A and B?

Regards,

Oskar Liljeblad

4 REPLIES
Green

Re: tunnel traffic between two IPsec LAN-to-LAN tunnels on ASA 5

Yes, it is possible. Your description is a little confusing though. Is this what you mean?

Tunnel 1. A to B

Tunnel 2. A to C

...and you want traffic between B and C?

Community Member

Re: tunnel traffic between two IPsec LAN-to-LAN tunnels on ASA 5

Yes, that is what I mean! Is that possible?

Green

Re: tunnel traffic between two IPsec LAN-to-LAN tunnels on ASA 5

Yes.

Site A-

same-security-traffic permit intra-interface

access-list crypto1 extended permit ip

access-list crypto1 extended permit ip

access-list crypto2 extended permit ip

access-list crypto2 extended permit ip

access-list nonat extended permit ip

access-list nonat extended permit ip

Site B-

access-list crypto extended permit ip

access-list crypto extended permit ip

access-list nonat extended permit ip

access-list nonat extended permit ip

Site C-

access-list crypto extended permit ip

access-list crypto extended permit ip

access-list nonat extended permit ip

access-list nonat extended permit ip

This may help as well.

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00804675ac.shtml

Community Member

Re: tunnel traffic between two IPsec LAN-to-LAN tunnels on ASA 5

Can the same be done with SSLVPN and ipsec? We have this scenario:

user --(sslvpn)-- ASA5520 --(ipsec)-- remote

Is it possible for user to reach the remote network?

507
Views
0
Helpful
4
Replies
CreatePlease to create content