ReRouting IPSec traffic on the hub ASA

[Guido Arturo Catalano]

HI,

I have a hub location "A" and two braches "B" and "C", both connected to "A" using IPSec tunnels on ASA 5505 v8.0.

The question is: Can I reroute traffic coming from "B" to "C"?

"B"  --IPSec-->  "A"  --IPSec-->  "C"

Thanks.

Guido

[Federico Coto Fajardo]

Hi Guido,

Yes, the ASA allows hairpinning the traffic back out the same interface in which it receives it.

Assuming that both tunnels end on the outside interface, then normally you need:

same-security-traffic permit intra-interface

Also, the correct routing and NAT rules for the traffic.

Let us know if you need further help.

Federico.