I'm having trouble routing subnet over VPN from Site A through Site B to Site C



  • My challenge is that my customer who is sitting on Site C requires that I come from a dedicated subnet, which is not the same as my LAN, so I have to do NAT / BINAT translation. It also works well between Site B and Site C, but I can not figure out how I also get it from Site A.

    Site A
    LAN: 10.10.0.0 /20

    Site B
    LAN: 192.168.0.0 /18
    NAT: 172.25.10.0 /24

    Site C
    LAN: 172.23.250.0 /24

    All IPSec tunnels are up and I can get traffic from Site A to Site B and from Site B to Site C, but not from Site A via Site B to Site C.
    I have try to add additional Phase 2 configuration, but i can't get it working,

    Is there anyone who can help please?


Log in to reply