01-30-2024 09:04 AM
We have a site-to-site VPN topology like this:
site 3---------site 1---------site2
We have some remote access users that VPN into the ASA at site 1. They can access site 2 just fine, so I tried to copy the config (changing to relevant networks) to allow the users access to site 3 but it does not work. I am happy to post the config of site 3 for some help.
Thank you!
01-30-2024 10:22 AM
Make sure VPN users IP allowed in the Tunnel and check Routing part.
Also give us what devices are this (other than site 1 you mention ASA )? what code running on this ?
Does the Site 3 know the VPN users IP range how to reach back ?
01-30-2024 10:27 AM
Can you share config
Thanks
MHM
01-30-2024 10:50 AM - edited 01-30-2024 10:54 AM
I was able to get this working, on site 1 I had configured:
nat (inside,outside) source static remote_access_pool remote_access_pool dest static site_3_subnet site_3_subnet
This fixed it:
nat (outside,outside) source static remote_access_pool remote_access_pool dest static site_3_subnet site_3_subnet
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide