tunnel traffic between two IPsec LAN-to-LAN tunnels on ASA 5520?

[oskarlil1]

Is it possible to tunnel traffic between two IPsec LAN-to-LAN tunnels, or between one IPsec tunnel and one SSLVPN tunnel

(AnyConnect client) with the ASA 5520?

E.g. We have two IPsec LAN-to-LAN tunnels. Is this setup possible:

Tunnel 1. Local subnet: B. Remote subnet: A.

Tunnel 2. Local subnet: A. Remote subnet: B.

..and have traffic flow between subnets A and B?

Regards,

Oskar Liljeblad

[acomiskey]

Yes, it is possible. Your description is a little confusing though. Is this what you mean?

Tunnel 1. A to B

Tunnel 2. A to C

...and you want traffic between B and C?

[oskarlil1]

Yes, that is what I mean! Is that possible?

[acomiskey]

Yes.

Site A-

same-security-traffic permit intra-interface

access-list crypto1 extended permit ip

access-list crypto1 extended permit ip

access-list crypto2 extended permit ip

access-list crypto2 extended permit ip

access-list nonat extended permit ip

access-list nonat extended permit ip

Site B-

access-list crypto extended permit ip

access-list crypto extended permit ip

access-list nonat extended permit ip

access-list nonat extended permit ip

Site C-

access-list crypto extended permit ip

access-list crypto extended permit ip

access-list nonat extended permit ip

access-list nonat extended permit ip

This may help as well.

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00804675ac.shtml

[oskarlil1]

Can the same be done with SSLVPN and ipsec? We have this scenario:

user --(sslvpn)-- ASA5520 --(ipsec)-- remote

Is it possible for user to reach the remote network?