Route traffic between IPSEC vpns

joelserrano

Hi,

Is it possible to route traffic between to different IPSEC vpns?

This is my setup:

LOCAL REMOTE
VPN1: 192.168.30.0/24 <-> 10.0.0.0/16 (site-to-site)
VPN2: 192.168.50.0/24 <-> 192.168.30.0/24 (mobile client)

Both VPNs work as expected.

I would like to access from 192.168.50.X to 10.0.X.X, if for example I send a ping from 192.168.50.1 to 10.0.0.1, the traffic tries to go through the WAN as if 10.0.0.1 was a public IP,

Is there a way of achieving this? I suppose I will need a NAT rule to make traffic from 192.168.50.X appear with a 192.168.30.X when going to 10.0.X.X.

Any hints?

Thanks!
Joel.

johnsonp

Hi There

I'm no expert, but we had this same scenario and this solved it for me - add another Phase 2 to your site-site network in which you specify your mobile IPSec range as local. And the same on the other side of your site-site tunnel.

Hope this helps!
Peter

joelserrano

Hi PeterJ, thank you for your answer. I'm going to try that tonight and get back with results.

Best regards,
Joel.

joelserrano

Just FYI:

I was able to test it right away and it works perfectly. After adding another P2 on both endpoints, I can connect with my mobile client to my home VPN, and from there access the LAN of the site-to-site VPN.

Thanks for your suggestion!

Best regards,
Joel.

johnsonp

Glad to have helped