Site To Site HO Gateway

[Salman.Baig]

i have to same model firewalls i configure site to site IPsec vpn its working fine both sides LAN network accessible everything working fine. i want to all my branch internet traffic going to HO Firewall Gateway branch isp did not  use for internet traffic means my branch user internet traffic going out HO Firewall.is it possible is yes please help.

[Rob Ingram]

Hi @Salman.Baig 

You need to amend your crypto map ACL that defines interesting traffic to include the networks 0.0.0.0/0.0.0.0.

On the HO ASA you will need to include the command same-security-traffic permit intra-interface and create a NAT rule to NAT the Branch traffic behind the HO office ASA outside interface.

HTH

[balaji.bandi]

Branch router point all traffic towards Tunnel interface towards HO

on HO maksure you allow the ACL and NAT available for this subnet to use internet.