Solved

L2L tunnels between three sites with ASAs

Posted on 2013-11-11
4
301 Views
Last Modified: 2013-11-14
I am in the planning stages for a 3 site deployment where I would have Sites A, B, C. Site A is the main site and sites B and C will access internet through Site A.

I want all traffic other than local to be routed through the main site (A) however, site B needs to access 2 servers at site C and I would rather route that traffic on a tunnel between B and C.

My question is.... how can I tell the ASA to send traffic for x.x.x.x and y.y.y.y to tunnel BC and everything else to tunnel AB?
I am a little confused by this setup. Basically I would setup interesting traffic for tunnel BC to be x.x.x.x and y.y.y.y but since tunnel AB will route everything else, what would I set that up to be?

                    Site B===============Site C
                       \                                       /
                         \                                   /
                           \                               /
                             \                           /  
                               \                       /
                                 \     Site A    /
0
Comment
Question by:troubleshooter141
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
  • 2
4 Comments
 
LVL 19

Accepted Solution

by:
Kash earned 500 total points
ID: 39638869
i take it site b and c will have have their own internet connections as it is a basic necessity for this setup to work.

can you not create a direct site link from b to c as a separate connection and then have another connection for site A
0
 
LVL 3

Author Comment

by:troubleshooter141
ID: 39639114
yes you're corrent, each site will have their own internet connection, however in order to enforce certain policies I want all internet traffic to go through site A.

Each location will have 2 tunnels, one to each site. For instance, Site A will have a tunnel to site B and a tunnel to site C, site B will have a tunnel to site A and a tunnel to site C and site C will have a tunnel to site A and a tunnel to site B.
0
 
LVL 3

Author Closing Comment

by:troubleshooter141
ID: 39648852
I resolved this. Assigning points to the only answer received, although it wasn't what I was looking for and what ultimatelly resolved the issue.
0
 
LVL 19

Expert Comment

by:Kash
ID: 39649220
do you mind sharing what did you do for a reference and knowledgebase.
0

Featured Post

Secure Your WordPress Site: 5 Essential Approaches

WordPress is the web's most popular CMS, but its dominance also makes it a target for attackers. Our eBook will show you how to:

Prevent costly exploits of core and plugin vulnerabilities
Repel automated attacks
Lock down your dashboard, secure your code, and protect your users

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Join Greg Farro and Ethan Banks from Packet Pushers (http://packetpushers.net/podcast/podcasts/pq-show-93-smart-network-monitoring-paessler-sponsored/) and Greg Ross from Paessler (https://www.paessler.com/prtg) for a discussion about smart network …
ADCs have gained traction within the last decade, largely due to increased demand for legacy load balancing appliances to handle more advanced application delivery requirements and improve application performance.
Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.
This video gives you a great overview about bandwidth monitoring with SNMP and WMI with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're looking for how to monitor bandwidth using netflow or packet s…

738 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question