Site to Site VPN

[chilukurir]

When you setup a site to site VPN using 7200 routers,

how do the users share resources. On what basis can we share resources? Do we need to use VPN clients? How can users on both sides see the shared resources?

[rbharania]

Not sure what you mean by "resources". If the routers are doing the vPN, thaen the clients do not need to have VPN software - the routers are

the crypto endpoints, not the clients.

Hope this helps

-Rakesh

[ndebroy]

I want to do conformance testing /certification on the TCP/Ip stack that we are using, could you suggest how I should go about doing this.

As TCP/IP does not have laid standards like X25 etc, how can this be done.

[a.butterworth]

Is the VPN up? Can you ping between networks?

If you can (and there are no ACLs etc) then you need to look into the higher layers; name resolution etc

[ozan.ocal]

site-site vpn is CPE based.(i.e between two network devices that support IPSEC.

The users do not need any vpn clients, they are just accessing the other site/branch. You do not need to do even NAT. Just point-to-point connection from IPSEC perspective.