Have the following configuration where site-to-site VPNs work fine. Cannot communicate from one end to the other directly.
Site A <---- VPN ----> Site B <----> VPN <----> Site C
Communications between Site A to Site B and Site B and Site C work fine. Site B is central facility. However, I cannot communicate directly from Site A to Site C and would prefer not to setup a Site A to Site C VPN. Are there special policies that must be set to accomplish this? All VPN tunnels terminate on the outside interface of the participating devices.