Timeline for Cisco site-to-site vpn multiple subnet route over tunnel
Current License: CC BY-SA 3.0
16 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Jun 17, 2020 at 8:51 | history | edited | CommunityBot |
Commonmark migration
|
|
| Nov 1, 2018 at 16:57 | history | edited | Ron Maupin♦ |
edited tags
|
|
| Feb 19, 2018 at 19:56 | comment | added | Ron Maupin♦ | Did any answer help you? If so, you should accept the answer so that the question doesn't keep popping up forever, looking for an answer. Alternatively, you can provide and accept your own answer. | |
| Oct 25, 2017 at 20:02 | answer | added | Satish | timeline score: 1 | |
| Oct 25, 2017 at 19:47 | comment | added | Satish | I have updated my question with output. | |
| Oct 25, 2017 at 19:45 | history | edited | Satish | CC BY-SA 3.0 |
added 6864 characters in body
|
| Oct 25, 2017 at 7:20 | answer | added | Hung Tran | timeline score: 2 | |
| Oct 25, 2017 at 4:38 | comment | added | Konstantin Goncharenko |
How your 70.x.x.x worked earlier? According to your first output you have NAT for this network or something like that. access-list ACL-VPN extended permit tcp 10.0.0.0 255.0.0.0 10.100.1.0 255.255.255.0 You need to collect any configuration on ASA according your first working network and then try to repeat it for new one. Site-2-Site works fine for dozens of network, if everything is configured correctly.
|
|
| Oct 25, 2017 at 3:06 | comment | added | Satish | We do have NAT exempt, in my case if i send traffic from 60 network it bring down 10 net tunnel and 60 network work fine, if i send traffic with 10net then it drop 60 network, in short either one is working they both killing each other, it seem cisco doesn't like multiple interesting traffic ACL | |
| Oct 25, 2017 at 2:50 | comment | added | Ricky | ASA requires the ACL to match on both ends. Additionally, you need to exclude VPN traffic from NAT. | |
| Oct 25, 2017 at 2:03 | history | edited | Satish | CC BY-SA 3.0 |
added 212 characters in body
|
| Oct 25, 2017 at 1:47 | comment | added | Satish |
Yes AWS has return route for 60 and 70
|
|
| Oct 25, 2017 at 1:41 | comment | added | Ron Trunk | Does AWS have a route to your 60 network back through your VPN? | |
| S Oct 25, 2017 at 1:33 | history | suggested | 0TTT0 | CC BY-SA 3.0 |
attempted to salvage the question through correcting grammar
|
| Oct 25, 2017 at 1:32 | review | Suggested edits | |||
| S Oct 25, 2017 at 1:33 | |||||
| Oct 25, 2017 at 1:28 | history | asked | Satish | CC BY-SA 3.0 |