Hub and Spoke VPN Setup with VoIP

[Mattthew Haworth]

I have a new VPN network setup with 8 branch offices connected back to head quarters.  The new challenge I have been given is that they need each of the branch offices to communicate across the VPN tunnel.  The HQ VPN device is an ASA 5510 and the branch offices are 5505.  The ultimate goal is the enable every branch office to talk to every other.  We have a VoIP system that is unable to call other branches.  The signalling is initiating the calls, but the phone to phone traffic is not routing correctly.  I am able to provide configs if necessary.

[Julio Carvajal]

Hello Matthew,

Is the VPN traffic for any other protocol working as expected?

Check my blog at http:laguiadelnetworking.com for further information.

Cheers,

Julio Carvajal Segura

[Mattthew Haworth]

Traffic (any) can flow from each remote site to HQ, but not from site to site.  The remote sites all have dynamic public IPs and the HQ is the only static public IP so remote site to remote site vpns are not feasible.  i need to setup traffic to route from a branch office, through hq, to another branch office.

[Mattthew Haworth]

Anyone have any ideas? Or do I need to open a TAC case?

[Mattthew Haworth]

I figured this out.  NAT exceptions on the hub side, add the "interesting" subnets to each spoke.