Client / Site -to-Site VPN

[eltory]

Hi,I have the following question of VPN access:

There is a site-to-site VPN (using 17xx and 26xx router) between Hong Kong and US, and a VPN client(located in Thailand) access the Hong Kong Network by using client-to-site VPN.

Can this VPN client access the network of US (via Hong Kong)in the same time?

Description:

VPN client (Thaland)-->VPN router (Hong Kong)-->VPN router(US)

Thanks!

[pdentico]

Yes you can. It's all in the access-lists, and depending on the client you may have to modify the connection parameters to include both network addresses.

Yell if you need more detail.

[eltory]

Thanks for your help!

May I have the detail.....someone told me that I can't connect to both of the VPN site because the remote client cannot establish two vpn tunnel in the same time.

Please kindly help......

[pdentico]

Which client are you using and on what OS?

[eltory]

I haven't decided to use which VPN client yet.

The clients OS are Win95/98 and WinME.

NAT will be used on the both routers for protect the LAN, and the remote clients are using Dail-up Internet (i.e. no fixed IP addresses).

Thanks!

[colegul]

Just include the client pool into the Lan2Lan access-list and nonat. Also, include the US network on the list of split-tunnel in Hong Kong. Hope it helps.

[eltory]

Thanks for your reply!

NAT will be used on the both routers(US/HK), so what can I do.....?