About Lohith_Reddy

As you don't want to make changes at Site A, you can use NAT to access Site A from C. You need to create both source and destination NAT rules translating IPs in Subnets A and C to Subnet B at Site B.   Example: Site A - 192.168.100.0/24 Site B - 192.168.40.0/21  Site C - 192.168.52.0/24 As the traffic is initiated from C. Site C                                                              Site B                                            Source:192.168.52.1  (Subnet C)               Source:192.168.41.1 (Subnet B) Destination:192.168.40.1  (Subnet B)         Destination:192.168.100.1  (Subnet A)   It does not need any changes in the tunnel configuration. If you don't have enough free IPs at site B, use Dynamic IP and Port translation.  ... View more

To access SiteA from SiteC: In tunnel config between A->B: add subnet of SiteC in remote Proxy ID at Site A and Local Proxy ID at site B In tunnel config between B->C: add subnet of SiteA in remote encryption domain at Site C and Local Proxy ID at site B Make sure that subnets 192.168.52.0/24 and 192.168.100.0/24 are not used locally at sites A and C respectively(causes routing issues). Add required routing and security rules. As you configured a tunnel between PaloAlto at Site B to Site C, you should be able to configure one between SiteA and SiteC.Please verify the configuration. ... View more