Hairpining with two IP SEC VPN Tunnels

[Sam_S1]

Hi - first post :)

Is there anything special required when you want to reach a host over a site to site VPN but the source traffic comes from another VPN tunnel as traffic would be entering and leaving the same physical interface?

Is there also a specific software version which the firewalls should be operating to support the above feature?

Thanks.

[MikePruett]

So you have two tunnels (lets just say they are both tied to WAN1). tunnel 1 is trying to hit a resource at tunnel 2?

As long as routes and policies are in place so the packet knows where to go and is allowed to get there it will be no issue. Technically it won't be hair-pinning because it will come in IPSEC1 and go out IPSEC2 etc...(logically different interfaces)

[Sam_S1]

Thanks all.

P2 under the VPNs are set to 0.0.0.0/0 however ,the select radio button under the 'Quick Mode Selector" is not selected, non of the radio buttons are selected.

Understand the concept of different IPSEC tunnels, thanks.

We are running Version 5.0 Build3608 GA Patch 7 and 

[Toshi_Esumi]

Make sure you have all destinations a remote location needs to reach to in the Phase2 networks unless you set 0/0<->0/0.