Set ip route through IP VPN between 3 sites

[jordan.pippen]

Dear All,

I would like to add ip route through VPN

For example A (TW) sites have established IP VPN to B (HK) site, and B site established IP VPN to C (US) site.

Now, I would like to add static route from A site to C site through B site

Can I know how to do it?

Actually, I have to configure many A sites situation (Cisco2600, PIX, Netscreen)

Also, what I need to do in B site and C site?

Thank you all to reply

[mohammedmahmoud]

Hi,

When using static routes, you need to configure it all the way on all the routers in the path, in both directions upstream and downstream.

ip route

NOTE: As a best practice please use both the outgoing interface and the next-hop.

HTH, please do rate all helpful replies,

Mohammed Mahmoud.

[jordan.pippen]

Hi mohammedmahmoud,

I have tried it before, however, it seems not work

For example cisco 2600

ip route 10.10.20.0 255.255.252.0 eth1 1

or PIX

route outside 10.10.20.0 255.255.252.0 eth1

Both the above not work

is there any senario can follow?

For next-hop, is it default is 1, how is it if I set 2 or 3?

[mohammedmahmoud]

Hi,

You must route the traffic upstream and downstream (From A to B to C, and then from C to B to A), static routing needs Hop by Hop static configuration on both traffic directions.

When talking about the next-hop, its not defaulted to 1, it should be the IP address of the next router in the path (The AD is the number which is defaulted to 1, you can increase it in order to have backup routes - Floating static routes).

I hope that i've been informative, and please don't hesitate if you have further questions.

HTH, please do rate all helpful replies,

Mohammed Mahmoud.

[jordan.pippen]

Hi,

ip route

If I am in

TW router 172.16.1.254

HK router 192.168.1.254

US router 10.10.1.254

ip route 10.10.1.0 255.255.0.0 eth1 192.168.1.254

and vice versa in US router?

I need to do something in HK router or not?

Thanks

[mohammedmahmoud]

Hi,

Yes you need to add static routes all the way on every router in the path hop by hop (router by router), upstream and downstream.

HTH,

Mohammed Mahmoud.