IP routing over VPN connections.

fivefeet8 · 01-29-09, 12:25 PM

Lets say I have several site to site IPsec VPN connections.

Site A: has a VPN to both Site B and Site C.
Site B: has a VPN to Site D
Site C: has a VPN to Site D

Site A can ping both Site B and C, but can not get to Site D. What's the problem and the solution?

**lduguay** · 01-29-09, 03:35 PM

For VPN routing, and assuming you are using Cisco MPLS, you would need to set the VPN routing and forwarding table (VRF).
Check here:
http://www.cisco.com/en/US/docs/net_...html#wp1018964

fivefeet8 · 01-29-09, 03:45 PM

What if you're not using Cisco equipment with MPLS support? Could Site A communicate with Site D assuming Site A and Site D are on different networks.

Assume that Site B is addressed to a subnet of Site D. Site A however is not addressed to the same network, but can communicate with Site B with the VPN.

**lduguay** · 01-29-09, 03:51 PM

It really depends on what equipment/software you are using. Sometimes VPN to VPN route propagation is not allowed

01-29-09, 12:25 PM	#1
fivefeet8 Ngemu Mod Join Date: Jul 2003 Location: Fresno, CA Posts: 1,886	IP routing over VPN connections. Lets say I have several site to site IPsec VPN connections. Site A: has a VPN to both Site B and Site C. Site B: has a VPN to Site D Site C: has a VPN to Site D Site A can ping both Site B and C, but can not get to Site D. What's the problem and the solution? __________________ [i7 2600k @4.4ghertz][2x4 GB DDR3 1600][EVGA GTX570 1.280GB SC][EVGA GTX460 physx][Asrock Extreme7 Gen3 Z68][2xSeagate 160 Gb SATA HD raid0][Seagate 250 GB SATA2 HD][Sony Bravia 40' 1080p LCD HDTV][NEC 3520a DVD+-DLw][Windows 7 Ultimate x64][Rosewill 1000w]

01-29-09, 03:35 PM	#2
lduguay Un-Ripped Join Date: Oct 2004 Location: Montreal, Canaduh! Posts: 1,968	Re: IP routing over VPN connections. For VPN routing, and assuming you are using Cisco MPLS, you would need to set the VPN routing and forwarding table (VRF). Check here: http://www.cisco.com/en/US/docs/net_...html#wp1018964 __________________ Evga X58\|I7 965 3.8GHz\|Ultra 120 Extreme\|Evga GTX 480 SC\|2 x Intel X25-M 80GB RAID 0\|Intel 520 - 240 GB\|WD Black Caviar 1TB\|6GB Corsair XMS3 1600C8 \|Corsair 1000W PSU\|Antec Twelve-Hundred\|DELL U3011\|Logitech G500\|Logitech G19

01-29-09, 03:45 PM	#3
fivefeet8 Ngemu Mod Join Date: Jul 2003 Location: Fresno, CA Posts: 1,886	Re: IP routing over VPN connections. What if you're not using Cisco equipment with MPLS support? Could Site A communicate with Site D assuming Site A and Site D are on different networks. Assume that Site B is addressed to a subnet of Site D. Site A however is not addressed to the same network, but can communicate with Site B with the VPN. __________________ [i7 2600k @4.4ghertz][2x4 GB DDR3 1600][EVGA GTX570 1.280GB SC][EVGA GTX460 physx][Asrock Extreme7 Gen3 Z68][2xSeagate 160 Gb SATA HD raid0][Seagate 250 GB SATA2 HD][Sony Bravia 40' 1080p LCD HDTV][NEC 3520a DVD+-DLw][Windows 7 Ultimate x64][Rosewill 1000w]

01-29-09, 03:51 PM	#4
lduguay Un-Ripped Join Date: Oct 2004 Location: Montreal, Canaduh! Posts: 1,968	Re: IP routing over VPN connections. It really depends on what equipment/software you are using. Sometimes VPN to VPN route propagation is not allowed __________________ Evga X58\|I7 965 3.8GHz\|Ultra 120 Extreme\|Evga GTX 480 SC\|2 x Intel X25-M 80GB RAID 0\|Intel 520 - 240 GB\|WD Black Caviar 1TB\|6GB Corsair XMS3 1600C8 \|Corsair 1000W PSU\|Antec Twelve-Hundred\|DELL U3011\|Logitech G500\|Logitech G19

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
Get Your VPN for Free ' This Week on inside* Publications	News	Latest Tech And Game Headlines	0	06-02-12 03:00 AM