Route traffic from HQ - branch remote ipsec tunnel customer network.

Forum|Forum|7 years ago
November 21, 2018
3 replies
5577 views

Hi folks,

We have ipsec tunnel vpn site - site between our HQ to branch office. Now branch office has ipsec tunnel with customer.

Our HQ users need to access that customer network which is connected via remote Site - site2 site ipsec tunnel from branch office

I'm using fortigate 200 D in HQ and 100D in branch office. any pointers please.

Is there any option I can route traffic that comes from HQ to remote site towards customers ipsec tunnel?

Its same like we forward sslvpn traffic to ipsectunnel. can we forward ipsec to remote device ipsec tunnel ?

Thanks

Atul

Best answer by emnoc

Yes, ensue you have phase2 proposal and router to the final destination. If you deploy a ipsec phase2 with 0.0.0.0/0:0 and control the route and firewall the HQ should be able to access the final remote site network(s).

Ken Felix

emnocAnswer

New Member

Yes, ensue you have phase2 proposal and router to the final destination. If you deploy a ipsec phase2 with 0.0.0.0/0:0 and control the route and firewall the HQ should be able to access the final remote site network(s).

Ken Felix

adograAuthor

New Member

ok - So IPsec tunnel vpn customer(final destination) connected via branch office doesn't need to any thing in their end. Once I'll add route 0.0.0.0/0:0 in existing ipsec tunnel from HQ to branch office. HQ users should be able to access final destination using branch existing vpn.

Again this change requires in between our HQ and branch ipsec tunnel to route traffic from HQ network to customer( final destination) connected via branch office.

thanks again

Sign up

Login with SSO

Login to the community

Login with SSO