ASA client VPN routing

Hi Gurus

I have various ASA firewalls (5505, 5510) globally which are linked with site to site VPNs.  I have client VPNs for each site but want to allow users to connect to any site(s) VPN and allow traffic to all other sites.

Can anyone point me to any articles? or perhaps provide example configurations?

Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Depending on the number of sites, it may be very easy to simply create 1 tunnel from each site to each site so that traffic bound for a certain subnet would be caught by the correct crypto map, encrypted, then sent along the appropriate tunnel.    

jasonhamlettAuthor Commented:
we already have tunnels between each site..?
If all your sites are already connected, then the VPN clients would need 1 profile for each VPN endpoint.   They could connect to any endpoint and hit all other sites through the existing tunnels.    Each firewall would need the VPN client group acls modified to allow the traffic from the clients to the other sites....  

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
jasonhamlettAuthor Commented:
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today

From novice to tech pro — start learning today.