VPN Site-to-Site access

[prot]

Hi,

We have site-to-site IPsec VPN that works fine.

Our HQ network is 192.168.123.0 and branch is 192.168.10.0

Then we have another IPsec VPN that connect to our HQ, the problem is now that when we are connected to HQ VPN we can not acces branch network, already did Firewall policy so its not blocking it but it is still unreachable - Accept: session timeout

What else do we need to configure ?

Thank you for your help!

[mhe]

Do you have setup the routing in your branch office to include the VPN Range via HQ?

[prot]

Well i believe IPsec Point-to-Point wizard already did it ?

As localy in HQ i can access branch network, only when im connected to HQ IPsec i cant.

[mhe]

besides believe you can also verify it in the routing monitor

[prot]

I can see it in routing monitor

[spanz]

if the IPSEC tunnels configured to use "no NAT between sites",

On the branch - did you verify that you have a static route points to the protected subnets of the site which is tunneled to the HQ appliance from the other side ?