I would like to implement two VPNs on the same interface of a router.

enter image description here

The router in question is router A which has one public interface Fa0/0 with IP: (ex).

First IPSec tunnel is a LAN-to-LAN IPSec to the peer router B: Fa0/1 with IP:

The second IPSec tunnel is to cisco VPN Client, these clients use a public router to connect to internet.

The scenario is like this: Client connected to router C will use cisco VPN client to connect to the router A and this router will forward the request to router B using IPSec tunnel.



  • 1
    What you are asking to do is called "hairpinning," and there are many examples on Cisco's website. The configuration will depend on the IOS version you are running. I assume your VPN clients also need to get to internal hosts on router A?
    – Ron Trunk
    Commented Jan 22, 2017 at 15:35
  • This does not describe hairpinning. Commented Jan 23, 2017 at 0:05
  • I just need to connect to router B subnet using vpn client but through router A, please confirm it is hairpinning so I can look for tuto...thanks
    – fsidiosidi
    Commented Jan 23, 2017 at 11:36
  • Did any answer help you? If so, you should accept the answer so that the question doesn't keep popping up forever, looking for an answer. Alternatively, you could provide and accept your own answer.
    – Ron Maupin
    Commented Aug 15, 2017 at 19:13
  • Sorry, I hope now it's ok.
    – fsidiosidi
    Commented Aug 16, 2017 at 20:49

1 Answer 1


What you describe is possible and has been configured countless times. Simply look up the commands to configure your networking equipment. Since you mention Cisco's VPN client, I assume you are using Cisco routers and Cisco Anyconnect VPN Client.

First, configure the Site-to-Site (or LAN-to-LAN) VPN tunnel between A & B. Then configure the Remote Access VPN service on A.

  • The routing betwwen the VPNs is done by the router A??? What needs to be check to make sure router A will forward packets to subnet router B??? Thanks
    – fsidiosidi
    Commented Jan 23, 2017 at 11:38
  • Precisely. Yes. The routing table determines where the packets are forwarded. Commented Jan 23, 2017 at 17:49

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.