topic Site To Site HO Gateway in Network Security

Site To Site HO Gateway

Salman.Baig — Fri, 25 Sep 2020 09:28:13 GMT

i have to same model firewalls i configure site to site IPsec vpn its working fine both sides LAN network accessible everything working fine. i want to all my branch internet traffic going to HO Firewall Gateway branch isp did not use for internet traffic means my branch user internet traffic going out HO Firewall.is it possible is yes please help.

Re: Site To Site HO Gateway

Rob Ingram — Fri, 25 Sep 2020 09:48:57 GMT

Hi @Salman.Baig

You need to amend your crypto map ACL that defines interesting traffic to include the networks 0.0.0.0/0.0.0.0.

On the HO ASA you will need to include the command same-security-traffic permit intra-interface and create a NAT rule to NAT the Branch traffic behind the HO office ASA outside interface.

HTH

Re: Site To Site HO Gateway

balaji.bandi — Fri, 25 Sep 2020 11:16:45 GMT

Branch router point all traffic towards Tunnel interface towards HO

on HO maksure you allow the ACL and NAT available for this subnet to use internet.