topic Re: Having trouble passing traffic from one VPN through to another in General Topics

Having trouble passing traffic from one VPN through to another

CoreHR — Mon, 16 Dec 2019 12:45:02 GMT

Hi all,

Here's what I'm trying to do - I have a PA firewall with two VPNs - let's call them A and B. I'm trying to work out how to get traffic from site A to route through to site B, but it's eluding me - the site B tunnel doesn't come up.

I have tunnel.198 to Site A with a route passing 192.168.24.0/21 traffic to that tunnel, and tunnel.300 with a route passing 10.10.27.2/32 to that tunnel.

I've added proxy IDs to the A/B VPNs so that the site A VPN is advertising the site B network and vice versa.

Clearly I'm misunderstanding how this is supposed to work - can somebody clarify?

Re: Having trouble passing traffic from one VPN through to another

CoreHR — Mon, 16 Dec 2019 13:17:57 GMT

And a quick follow-up: there are no NAT rules in place - are they required?

Re: Having trouble passing traffic from one VPN through to another

CoreHR — Tue, 17 Dec 2019 10:59:09 GMT

Turns out it wasn't an issue with my config, the remote VPN admin had given me the wrong settings so the ipsec tunnel wasn't coming up.