Route RAVPN traffic over site to site tunnel

[ironman28]

We have users able to RAVPN to an office, but can't access another office.  There is a site-to-site VPN tunnel between the two offices.  The IPs user get when the remote in is 10.10.20.0/24 and the site they try to get to is 172.16.30.0/24.

Is this a routing issue or do I need to include the RAVPN subnet in the site-to-site tunnel or NAT issue?

[Rob Ingram]

@ironman28 you need to configure the command same-security-traffic permit intra-interface to allow the traffic to hairpin back out the same (outside) interface. You would need a NAT exemption rule to ensure the RAVPN ip pool networks are not unintentially translated. And you would also need to modify the crypto ACL (on both peers) to allow the RAVPN network over the S2S VPN.

[ironman28]

Rob, 

Thank you for the suggestion.   It looks like we were able to fix it.   

If we want to limit the remote access VPN users to some servers over the S2S VPN, where should I apply the ACL?

Thanks,

[MHM Cisco World]

can you share config ?