So I configured a site-site vpn tunnel in ASDM on an ASA 5512.
outside interface to outside interface - protected networks (local - 81, 71)(Remote - 80, 70) IKEv2 Pre-shared key
vice versa at HQ site ---------- VPN connection is fine
---HQ--
outside interface 70.80.90.100
inside interface 192.168.80.17 (80_NET)
inside interface 192.168.70.17 (70_NET)
---remote site--
outside interface 100.90.80.70
inside interface 192.168.81.254 (81_NET)
inside interface 192.168.71.254 (71_NET)
I need a bidirectional connection from 70_NET to 71_NET
80_NET and 81_NET should be able to hit everything.
Current ACL rules:
81 interface incoming rule: Source - 81_NET Destination any permit ip
71 interface incoming rule: Source - 71_NET Destination 70_NET, 80_NET permit ip
80 interface incoming rule: Source - 80_NET Destination any permit ip
70 interface incoming rule: Source - 70_NET Destination 71_NET, 81_NET permit ip
---------- Can any let me know if this is right or there's anything I need to add?
No comments:
Post a Comment