Configuring VPN tunnel using inside and outside together

[sagar.shetty]

Hi,

I have 3 FWs ( A-->B-->C). A and B are connected over ther internet and B and C are connected in the internal NW. So I can form a ipsec tunnel between A and B using the outside interface on the both FWs. At the same time, I need to create another tunnel between B and C, so that the traffic behind A would be able to reach traffic behind C with complete encryption throughout. Forming a tunnel on the outside is not a challenge but I need to know if I can form another tunnel using the inside i/f of B to outside i/f of C both of which will be in a private range.

Any suggestions will be appreciated.

Thanks,

[maheshyerra]

Sagar,

It is very much possible through hud -spoke IPSEC connectivity.Inshort you want to ride ipsec tunnel over two tunnels.For tunnel between B and C ,it will be from high security to low security level.You can search on cisco sites for the newtork architecture and sample config parrts.

rgds,

Mahesh.