Solved

Routing to a DMZ in a spoke from a different spoke in hub and spoke VPN config

Posted on 2012-03-13
1
613 Views
Last Modified: 2012-04-19
As a company, we use a hub and spoke configuration.

The hub is a Cisco ASA 5510. Spokes are Sonicwall TZ100.

I'm sitting behind one of the spokes @ 10.40.45.1/24. On another spoke @ 10.40.46.1, I've put a server in a DMZ. The gateway address of the DMZ in 10.40.200.1.

I'm not sure if this is a routing issue for the Cisco, or a routing issue for the sonicwalls, but I would like to reach the DMZ'd device @ 10.40.200.100 from my computer @ 10.40.45.100. The Cisco is @ 192.168.199.1

Thanks in advance.
0
Comment
Question by:kblackwel
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
1 Comment
 
LVL 57

Accepted Solution

by:
Pete Long earned 500 total points
ID: 37718775
With a sonic wall on your site   - I'm not sure if it would work? but if you had an ASA it would,

You would need to add the distant DMZ Subnet mask to the cryptomap ACL that goes to the main site. Then you would need to go to the main site and add the DMZ subnet to  the other the cryptomap that handles the VPN to your site AND you would need to exempt that traffic from NAT (the command differ depending on the OS you are using)

Pete
0

Featured Post

Windows Server 2016: All you need to know

Learn about Hyper-V features that increase functionality and usability of Microsoft Windows Server 2016. Also, throughout this eBook, you’ll find some basic PowerShell examples that will help you leverage the scripts in your environments!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
replacing 2811 to ISR 4331 2 81
Cisco ACS Adding Root and Intermediate Certs 2 64
Routing Issue 26 69
port-forwarding asa 9.5 9 30
This is an article about my experiences with remote access to my clients (so that I may serve them) and eventually to my home office system via Radmin Remote Control. I have been using remote access for over 10 years and have been improving my metho…
Let’s list some of the technologies that enable smooth teleworking. 
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
Windows 10 is mostly good. However the one thing that annoys me is how many clicks you have to do to dial a VPN connection. You have to go to settings from the start menu, (2 clicks), Network and Internet (1 click), Click VPN (another click) then fi…

752 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question