Site-to-Site VPN - ISR Routers

[cisco_lite]

hi,

We have three sites A, B and C and I would like to configure site-to-site VPN for the traffic going from A to C via B with 2800 routers in each site.

Is it better/possible to define one tunnel from A to C via B or should two tunnels be defined i.e. A to B and B to C.

Regards.

[Jon Marshall]

Is there any reason you can't go straight from A -> C ?

Regardless, if you only need to have a VPN between A & C then just create 1 VPN tunnel. There is no point in having router at site B having to decrypt packets from A then encrypt to C when all it needs to do is route packets from A -> C.

Jon

[cisco24x7]

Isn't that what DMVPN for? If you make B the hub with A & C the spoke, then A can communicate with C through B