cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
759
Views
0
Helpful
2
Replies
Highlighted
Beginner

Site to Site VPN (Full Tunnel)

Hi All,

 

I need some help with configuring VPN. 

The current VPN configuration works fine without any issues, however, we would like to route all traffic from SITE A to HQ via Site to Site VPN (including Internet traffic). 

MY proposed configuration would be as below, please advise if this will be sufficient for me to route all traffic via the VPN tunnel or am I missing out something. 

 

HQ:

====

Config t

access-list ACL_TEST extended permit ip any object TEST_LAN  

 

NAT:

=====

object network TEST_LAN

nat (outside,outside) dynamic interface    // This will access to Internet//

 

REMOTE:

=======

 

Config t

object-group network TEST_Network 

network-object 172.20.67.0 255.255.255.128

network-object 172.20.68.0 255.255.255.0

network-object 172.20.67.248 255.255.255.248

 

object-group network HQ_Network

network-object 0.0.0.0 0.0.0.0 ( I am not sure if this will work)

 

ACL for VPN traffic:

================

access-list VPN_TRAFFIC extended permit ip object TEST_Network  any

 

NAT:

===

nat (inside,outside) 1 source static TEST_Network  TEST_Network  destination HQ_Network HQ_Network

 

Please assist and thanks in advance for your assistance. 

 

Regards,

 

Kanes.R

 

2 REPLIES 2
Highlighted
Enthusiast

Re: Site to Site VPN (Full Tunnel)

Hello @Kanes Ramasamy

 

Based on you configuration, everything seems to be OK. You shouldn´t have any problem with the traffic, apply the commands and let me know how it goes. 

 

HTH

Gio

Highlighted
Beginner

Re: Site to Site VPN (Full Tunnel)

I know this is an old post but I would like some clarification on this part:

 

HQ:

====

Config t

access-list ACL_TEST extended permit ip any object TEST_LAN  

 

NAT:

=====

object network TEST_LAN

nat (outside,outside) dynamic interface    // This will access to Internet//

 

Is the object "Test_Lan" the local or remote lan?