[Okta Webinar] Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 467
  • Last Modified:

Juniper routing through VPN tunnel

Hi!
I got 3 different WAN locations that need to speak to each other. Now they are connected through one IPSEC VPN and one IP-VPN (delivered by the ISP).   Location A and B, and B and C can talk to each other, but how can I route traffic so that also location A can communicate with location C?
I tried to add different routes on the location A firewall. But no matter what I do I can’t get the traffic through the IPSEC tunnel and forward to location C.
How can I solve this?
   VPN
0
elit2007
Asked:
elit2007
  • 2
1 Solution
 
Sanga CollinsSystems AdminCommented:
i have a hub - spoke VPN setup like this. At the spokes in order to route through the hub to another spoke i needed routes such as the following. Notice the route statement that have to go more than one hop have a destination IP of 0.0.0.0/0 as long as the ns5gt has policies to allow traffic, the routes will work

Site A
192.168.100.0/24 --> tunnel.1 dest-ip=192.168.100.1
192.168.120.0/24 --> tunnel.1 dest-ip=0.0.0.0      

Site B
192.168.150.0/24 --> tunnel.1 dest-ip =192.168.150.1
192.168.120.0/24 --> SiteC interface. dest-ip = 192.168.120.1

Site C
192.168.150.0/24 --> SiteB interface, dest-ip = 0.0.0.0
192.168.100.0/24 --> SiteB interface, dest-ip = 192.168.100.1
0
 
elit2007Author Commented:
In the meanwhile I have also figured out that the problem is the missing route on Site C.
Today nothing tells where 192.168.150.0 is located I the site C router.
0
 
Sanga CollinsSystems AdminCommented:
Since site C may not be a juniper, you may have to point the route to the same gateway as Site B. Te ne5gt upon recieving the traffic will find the route to site A in its route table and send it to the correct place.
0

Featured Post

Free Tool: IP Lookup

Get more info about an IP address or domain name, such as organization, abuse contacts and geolocation.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now