IPSEC topology

[stephenstown20]

the attachment shows the topology we are working on 

site 1 has an IPSEC tunnel to site 2 using tunnel 1

site 2 has an IPSEC tunnel to an Azure gateway using tunnel 2

can site 1 have IP connectivity to Azure using tunnel 2 ?

therefore with no direct tunnel connection 

the router at site 2 will have the normal parameters configured for the subnet at site 1

nat exemption 

security policy 

VPN interesting 

[MHM Cisco World]

There is no attachment

But anyway it can work.

[stephenstown20]

please see attached 

[MHM Cisco World]

In azure add route toward R2 for lan of R1 

In R1 add route toward R2 for azure lan 

In R1 add permit to azure lan in acl of vpn 

In azure add permit to R1 lan in acl of vpn 

In R2 add azure lan to R1 vpn acl

In R2 add R1 R1 lan to azure vpn acl

That it

[stephenstown20]

thank you

[MHM Cisco World]

---

@stephenstown20 wrote:
thank you

---

You are so welcome 

MHM