Skip to main content
Sam_S1
Sam_S1
New Member
February 21, 2017
Question

Hairpining with two IP SEC VPN Tunnels

  • February 21, 2017
  • 2 replies
  • 3771 views

Hi - first post :)

 

Is there anything special required when you want to reach a host over a site to site VPN but the source traffic comes from another VPN tunnel as traffic would be entering and leaving the same physical interface?

 

Is there also a specific software version which the firewalls should be operating to support the above feature?

 

Thanks.

    2 replies

    MikePruett
    MikePruett
    New Member
    February 21, 2017

    So you have two tunnels (lets just say they are both tied to WAN1). tunnel 1 is trying to hit a resource at tunnel 2?

     

    As long as routes and policies are in place so the packet knows where to go and is allowed to get there it will be no issue. Technically it won't be hair-pinning because it will come in IPSEC1 and go out IPSEC2 etc...(logically different interfaces)

    Sam_S1
    Sam_S1Author
    New Member
    February 21, 2017

    Thanks all.

     

    P2 under the VPNs are set to 0.0.0.0/0 however ,the select radio button under the 'Quick Mode Selector" is not selected, non of the radio buttons are selected.

     

    Understand the concept of different IPSEC tunnels, thanks.

     

    We are running Version 5.0 Build3608 GA Patch 7 and 

    Toshi_Esumi
    SuperUser
    Toshi_Esumi
    SuperUser
    February 21, 2017

    Make sure you have all destinations a remote location needs to reach to in the Phase2 networks unless you set 0/0<->0/0.

    Terms & ConditionsAccessibility statement