Buy or Renew
Buy or Renew
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
cancel
Start a conversation
361
Views
0
Helpful
1
Replies

Hub+Spoke design spoke to spoke communication

jmessina
Level 1
Level 1

‎07-23-2003 04:11 PM - edited ‎03-09-2019 04:10 AM

WE have a hub and spoke vpn design with a PIX 515 at the main site and 501's at the spoke sites. The spoke sites are unable to commincate. I guess we could fully mesh them with tunnels but i was hoping there was someway to route spoke to spoke through the main site or do something similar to an IOS Dynamic Multipoint VPN but on the Pix. What are our options?

Labels:
0 Helpful
1 Reply 1

gfullage
Cisco Employee
Cisco Employee

‎07-23-2003 05:31 PM

The PIX won't route a packet back out the same interface it came in on, that includes packets coming in over one spoke tunnel and going back out over another spoke tunnel. No way around it with the PIX as a hub.

Fully meshing them would work, but get's messy and your workload increases exponentially as the number of spoke sites increases.

Changing the hub PIX with an IOS router or a VPN3000 would resolve your issues also.

Sorry I don't have a better solution for you.

0 Helpful
Customers Also Viewed These Support Documents