How to pass the traffic of a site VPN S2S by ASA to another S2S VPN site?

I have a need for hosts on separate VPN networks connected to my ASA corp to communicate among themselves.  Example: Host A site 1 a need to communicate with host B on the site 2.  Both sites 1 & 2 are connected via the VPN S2S.  I would get every site traffic to flow through the ASA at the other site.  Where should I start my configuration?  NAT? ACL?

I can ping each host in the network Corp. but cannot ping from one site to the other.  I set up same-security-traffic permit intra-interface and addition of NAT and rules the ACL to allow/permit 1 Site to contact Site 2.  When I do a trace of package through Deputy Ministers DEPUTIES, packets are allowed to pass. I read different that tell no NAT y at - it something at the other end of the VPN to do?  should NAT and ACLs rules be mirrored? Just in case, a site is an instance of MS Azure VM and the other is a 3rd party VM instance.

On the HubASA, can I set up a new card encryption that selects the Site1 Site2 traffic and protect the traffic and value her counterpart Site2 public IP or just add this selection of traffic to the existing encryption card for the existing tunnel between HubASA and Site2?

Just add this traffic to the existing encryption card.

Remember that this should be added on three routers (two hubs and there has been talk).

Site1

CRYPTO ip access list allow Site2 subnet >

CRYPTO ip access list allow subnet training3 >

CRYPTO ip access list allow subnet HUB >

Site2

CRYPTO ip access list allow Site1 subnet >

CRYPTO ip access list allow subnet training3 >

CRYPTO ip access list allow subnet HUB >

Training3

CRYPTO ip access list allow Site1 subnet >

CRYPTO ip access list allow Site2 subnet >

CRYPTO ip access list allow subnet HUB >

HUB

CRYPTO_1 ip access list allow Site1 subnet >

CRYPTO_1 ip access list allow Site1 subnet >

CRYPTO_1 ip access list allow Site1 subnet >

CRYPTO_2 ip access list allow Site2 subnet >

CRYPTO_2 ip access list allow Site2 subnet >

CRYPTO_2 ip access list allow Site2 subnet >

CRYPTO_3 ip access list allow subnet training3 >

CRYPTO_3 ip access list allow subnet training3 >

CRYPTO_3 ip access list allow subnet training3 >

Each of these ACLs is attributed to their respective crypto cards.  CRYPTO_1 is assigned the site1 crypto map, CRYPTO_2 is assigned to the site2 crypto card... etc.

I hope that's clear

In addition to this, you need to configure identity NAT / NAT provides both the HUB and the spokes of sites.

--

Please do not forget to select a correct answer and rate useful posts

Tags: Cisco Security

Similar Questions

  • How to pass the CS5.5 to CS6 and how much it cost in New Zealand?

    How to pass the CS5.5 to CS6 and how much it cost in New Zealand?

    If you do not want to go on the road to cloud and to subscribe, then Adobe still sells CS6 (online only) through their Web site

    http://www.Adobe.com/au/products/catalog/CS6._sl_id-contentfilter_sl_catalog_sl_software_s l_creativesuite6.html

    (Make sure you are in the store NZ - check the country link above Copyright in lower LHS of the page)

    Select your product and then click on buy

    I want to buy: select upgrade from the menu drop down

    I own:

  • How to pass the Visa Resource Name parameter to labview dll in labwindows/cvi

    Hello world

    I build a dll of labview, the prototype is: double getchannelpower (double f, uintptr_t * VISAResourceName);

    I don't know how to go from VISAResourceName to this function.

    Is it related to the ViPSession paremeter in function viOpen(REES ViSession, rn ViRsrc, ViAccessMode am, ViUInt32 ti,ViPSession vi)?

    BRs,

    lotusky

    Hey, guys:

    I figured out how to pass the parameter.

    In labview, you must replace the control of visa with string control. In this way, the generated dll function at the entrance of the string type.

    I hope this will help others!

    lotusky

  • How to pass the session IMAQ to the Subvi

    Hello

    My experience with LabView is neither very good nor extended. I am a scientist and I'm with IMAQ data acquisition. My current problem is that the people who wrote the script is modular, versatile, or clear initially structured. So I try to reduce the ridiculous number of tests in a simple flowchart to a level that people can actually understand it... and to make the more versatile script for future experiments.

    I'm introducing quite a few subVIs to be executed repeatedly. However, I can't know how to pass the IMAQ session on the Subvi. I constantly get the error messages. In this case, I want to acquire images with OIDE_CollectFrame.vi controlled by OIDE_TrialPhaseCollect.vi. I couldn't understand how to assign the refnum IMAQ session class, either.

    It is probably a newbie question, but usually I program with LabView.

    Dennis


  • HOW TO PASS THE HEX OF THE MAIN PROGRAM VI ENUM, SUB VI ENUM VALUE

    HOW TO PASS THE HEX OF THE MAIN PROGRAM VI ENUM, SUB VI ENUM VALUE.

    HOW THEN IT WILL CHOOSE CORRECT ON SUB VI HEXAGONAL ENUM VALUES.

    Enum values are strings, you must first convert the hexadecimal value to a hexadecimal value chain represtation.

    Then that convert from the enum.

  • How to pass the value?

    Hello.. I'm creating an application of streaming, in which I have a list field in a screen like this...

    1

    --------

    2

    --------

    3

    --------

    and when the item 1 is selected means a url must be passed to the video player...

    I created the list field screen in a package and a video player in other package... but I do not know how to pass the value of the field from the list to the player... Help, please... its URGENT...

    You can get the index selected by the listname.getSelectedIndex () method and compare that value with Vector data (data store URL) .that you will give a correct value from the URL and pass it.

  • How to pass the vcs - e License? A server to Server B.

    Hello

    my company has a vcs test server.  and we buy the new server.

    I need to spend vcs again server.   I backup and deploy using the vmware ovf file.

    deploy the success. but new server vcs poster license error.

    How to pass the license of vcs?

    Of his assignment, it is not necessary to use both servers at the same time.

    If I see, if you move the virtual computer between two servers and you used local storage the

    Serial number will change...

    Please remember useful frequency responses and identify useful or correct answers.

  • How to pass the value of the run-time file .sh by Oracle procedure

    I have a file test.sh that contain

    #1/bin/bash

    exp test/test@orcl file=/home/oracle/dump/test.dmp log=/home/oracle/dump/test.dmp grants = Y = index constraints Y = Y = (test) owner statistics = none

    Exit 0

    I craete a work called Create_job_proc in this work, I want to pass the value of job_action is the location of the file test.sh to

    /U01/home/Oracle/dump/test.sh and want to spend the test/test@orcl as a variable...

    Please suggest me... how to pass the value of Job_Action which will replace the .sh file content test/test@orcl to the value of the time of execution as scott/tiger@hr

    Thank you much Parth... It works perfectly...

    Thank you all for your help...

  • I have one of my programs adobe on a mac pro, which is broken. How to pass the program over this i mac?

    I have one of my Macbookpros that has a broken screen. How to pass the program Adobe of it ti that I have Mac?

    Download/install the desktop application, connect and install applications subscription.

    https://helpx.Adobe.com/creative-cloud/help/download-install-app.html

  • It costs more to go to monthly payments?  How to pass the year to monthly payments?

    It costs more to go to monthly payments?  How to pass the year to monthly payments?

    Diane H,

    Yes, the month subscriptions are expensive as they come without see all annual contract, Adobe - General conditions of subscription

    To change your plan see, update or change your plan creative cloud

    Let us know if that helps.

    Kind regards

    Bani

  • How to pass the album Live view mode Design while working on a fluid page? The drop down option isn't there as if it was on other pages.

    How to pass the album Live view mode Design while working on a fluid page? The drop down option isn't there as if it was on other pages.

    You can not.  If you want to work with FGLayouts, I recommend drop back to the Release of June 2014 CC before they took the Design of FGLayouts mode.

    You can get the version of June 2014 DW direct links below:

    Win: http://download.adobe.com/pub/Adobe/Dreamweaver/WIN/CC/Dreamweaver_14_LS20.exe

    Mac: http://download.Adobe.com/pub/Adobe/Dreamweaver/Mac/CC/Dreamweaver_14_LS20.dmg

    Solution #2: Modify your CSS FGLayout file by adding an X to the code as shown below.  This trick DW into thinking that it is a normal page, so you can use the new Design view.   NOTE: Do not change the CSS in design Panel.  Do it in Code view.  Record.  Close DW.  New launch DW.

    /*

    Properties Grid Dreamweaver fluid

    ----------------------------------

    DW-num-CLO-mobile: X4;

    DW-num-CLO-Tablet: 8;

    DW-num-OCOL-Office: 12;

    DW-gutter-percentage: 25;

    =====================================

    Nancy O.

  • How to connect the URL of Web site companies existing on the new site I've built?

    How to connect the URL of Web site companies existing on the new site I've built?

    Hello

    If you want to use the current domain with your new business catalyst site, please follow this link

    User manual

    Let me know if you have any question.

  • How to pass the start settings in starting a virtual machine?

    How can I use PowerCLI to start a new Linux VM and the nucleus of some startup parameters?

    What would be more simple: (a) to make and use a virtual machine model, or (b) to boot from an ISO image, or (c) start with a Linux VM and the clone who?

    The basic Linux is RedHat on an ISO on the network (ISO can be on a local path running the PowerCLI script if necessary).  If a model would be easier then a diagram how to make one of my ISO would be great!

    RedHat Linux can be configured by passing parameters of the kernel startup, so kickstart configures the system, something like

    KS=/my/path/KS.cfg otherparams

    where KS.cfg says kickstart what to do.

    How to pass the start settings in the new virtual machine?

    (It is probably completely irrelevant, but I work with Xen using bash scripting and)

    $UUID = xe model vm-install = "RedHatLinux64bit."

    XE vm-param-set uuid = $UUID PV-args="ks=/my/path/ks.cfg '.

    XE-vm-beginning uuid = $UUID

    now, it must be implemented on ESX. To determine when the new VM is fuly configured, my scripts from kickstart wrote a semaphore to be detected by the bash script.)

    I know very little about ESX and PowerCLI details will be particularly useful if you please!

    Thank you!

    Enjoy your break

  • How to pass the ObjectType as input for search criteria

    Hi all

    I have the search function that takes input parameters and returns all matching rows. It is only forward. My problem is to have several types as an input parameter. This is the reason why I'm not able to pass the value of entry for these types.

    My Input Type table looks like this.

    CREATE OR REPLACE TYPE T_T_PARTY_REQUEST_CRITERIA
    AS THE T_O_PARTY_REQUEST_CRITERIA TABLE;
    /
    CREATE OR REPLACE TYPE T_O_PARTY_REQUEST_CRITERIA
    AS AN OBJECT
    (
    SYSTEM_IDENTIFER VARCHAR2 (50).
    PROCESS_TYPE VARCHAR2 (50).
    UPDATED_BY VARCHAR2 (50).
    STATUS VARCHAR2 (50).
    CHILD_REQUEST_INDICATOR VARCHAR2 (25).
    TRACKING_REQUEST_INDICATOR VARCHAR2 (25).
    REQUEST_TYPE VARCHAR2 (50).
    REQUEST_TYPE_CLASS_NAME VARCHAR2 (50).
    PARTY_KEY_IDENTIFIER T_T_PARTY_KEY_IDENTIFIER,
    ADDTN_IDENTIFIER_INFO T_T_ADDTN_IDENTIFIER_INFO
    )
    /

    Finally the two entries are type again.my question is how to pass the values of these two T_T_PARTY_KEY_IDENTIFIER and T_T_ADDTN_IDENTIFIER_INFO. I defined the last two types now.

    CREATE OR REPLACE TYPE T_T_PARTY_KEY_IDENTIFIER
    AS THE T_O_PARTY_KEY_IDENTIFIER TABLE;
    /

    CREATE OR REPLACE TYPE T_T_ADDTN_IDENTIFIER_INFO
    AS THE T_O_ADDTN_IDENTIFIER_INFO TABLE;
    /

    CREATE OR REPLACE TYPE T_T_ADDTN_IDENTIFIER_VALUES
    AS THE T_O_ADDTN_IDENTIFIER_VALUES TABLE;
    /

    CREATE OR REPLACE TYPE T_O_PARTY_KEY_IDENTIFIER
    AS AN OBJECT
    (
    PARTY_KEY_TYP_NM VARCHAR2 (50).
    PARTY_KEY_VALUE VARCHAR2 (50)
    )
    /

    CREATE OR REPLACE TYPE T_O_ADDTN_IDENTIFIER_INFO
    AS AN OBJECT
    (
    ADDTN_INFO_KEY_TYP_NM VARCHAR2 (50).
    ADDTN_IDENTIFIER_VALUES T_T_ADDTN_IDENTIFIER_VALUES
    )
    /

    CREATE OR REPLACE TYPE T_O_ADDTN_IDENTIFIER_VALUES
    AS AN OBJECT
    (
    ADDTN_RQST_VALUE VARCHAR2 (50).
    ADDTN_RQST_VAL_DT TIMESTAMP (6).
    NUMBER OF ADDTN_RQST_VAL_NUM (19: 2)
    )
    /

    I glued the request my function here. When I pass the value null in the entry for these 2 types my query works. otherwise, it's say no valid Identifier.First I tried with the first Type.

    I am passing the value that
    (PRKYTP. PRTY_KEY_TYP_NM = ITTPRC. PARTY_KEY_IDENTIFIER. PARTY_KEY_TYP_NM OR ITTPRC. PARTY_KEY_IDENTIFIER. PARTY_KEY_TYP_NM = 'ALL' OR ITTPRC. PARTY_KEY_IDENTIFIER. PARTY_KEY_TYP_NM IS NULL).

    Error is Error (34,147): PL/SQL: ORA-00904: "ITTPRC." "" "" PARTY_KEY_IDENTIFIER '. "" PARTY_KEY_TYP_NM': invalid identifier


    SELECT DISTINCT T_O_PARTY_REQUEST_IDENTIFIER (PR. IN BULK PRTY_RQST_ID) GATHER IN T_T_P_R_CRITERIA
    TABLE (CAST (I_T_T_PARTY_REQUEST_CRITERIA AS T_T_PARTY_REQUEST_CRITERIA)) ITTPRC;
    PRTY_RQST PR
    JOIN BUSN_APPLC ON BIAP BIAP. BUSN_APPLC_ID IS PR. BUSN_APPLC_ID
    JOIN INTN_STATS INSTS ON INSTS. INTN_STATS_ID IS PR. INTN_STATS_ID
    JOIN INTN_PROCES_TYP INTPTY ON INTPTY. INTN_PROCES_TYP_ID IS PR. INTN_PROCES_TYP_ID
    LEFT JOIN RQSTYP ON RQSTYP RQST_TYP. RQST_TYP_ID IS PR. RQST_TYP_ID
    JOIN ADDTN_RQST_INFO ADTINF WE PR. PRTY_RQST_ID = ADTINF. PRTY_RQST_ID
    JOIN ADDTN_INFO_KEY_TYP ADDKEY ON ADTINF. ADDTN_INFO_KEY_TYP_ID = ADDKEY. ADDTN_INFO_KEY_TYP_ID
    JOIN PRTY_KEY PRTKEY WE PR. PRTY_RQST_ID = PRTKEY. PRTY_RQST_ID
    JOIN PRTY_KEY_TYP PRKYTP ON PRTKEY. PRTY_KEY_TYP_ID = PRKYTP. PRTY_KEY_TYP_ID
    WHERE (BIAP. BUSN_APPLC_NM = ITTPRC. SYSTEM_IDENTIFER OR ITTPRC. SYSTEM_IDENTIFER = 'ALL' OR ITTPRC. SYSTEM_IDENTIFER IS NULL)
    AND (INTPTY. INTN_PROCES_TYP_NM = ITTPRC. PROCESS_TYPE OR ITTPRC. PROCESS_TYPE = 'ALL' OR ITTPRC. PROCESS_TYPE IS NULL)
    AND (PR. UPDT_BY = ITTPRC. UPDATED_BY OR ITTPRC. UPDATED_BY = 'ALL' OR ITTPRC. UPDATED_BY IS NULL)
    AND (INSTS. INTN_STATS_NM = ITTPRC. STATUS OR ITTPRC. STATE = 'ALL' OR ITTPRC. THE STATUS IS NULL)
    AND (PR. CHLD_RQST_IND = ITTPRC. CHILD_REQUEST_INDICATOR OR ITTPRC. CHILD_REQUEST_INDICATOR = 'ALL' OR ITTPRC. CHILD_REQUEST_INDICATOR IS NULL)
    AND (PR. TRACK_RQST_IND = ITTPRC. TRACKING_REQUEST_INDICATOR OR ITTPRC. TRACKING_REQUEST_INDICATOR = 'ALL' OR ITTPRC. TRACKING_REQUEST_INDICATOR IS NULL)
    AND (RQSTYP. RQST_TYP_NM = ITTPRC. REQUEST_TYPE OR ITTPRC. REQUEST_TYPE = 'ALL' OR ITTPRC. REQUEST_TYPE IS NULL)
    AND (RQSTYP. RQST_CLASS_NM = ITTPRC. REQUEST_TYPE_CLASS_NAME OR ITTPRC. REQUEST_TYPE_CLASS_NAME = 'ALL' OR ITTPRC. REQUEST_TYPE_CLASS_NAME IS NULL)
    - AND (ITTPRC. PARTY_KEY_IDENTIFIER IS NULL).
    - AND (ITTPRC. ADDTN_IDENTIFIER_INFO IS NULL).
    AND (PRKYTP. PRTY_KEY_TYP_NM = ITTPRC. PARTY_KEY_IDENTIFIER. PARTY_KEY_TYP_NM OR ITTPRC. PARTY_KEY_IDENTIFIER. PARTY_KEY_TYP_NM = 'ALL' OR ITTPRC. PARTY_KEY_IDENTIFIER. PARTY_KEY_TYP_NM IS NULL).

    someone can say is that this approach is correct. If this isn't the case, suggest me.

    I am passing the value that
    (PRKYTP. PRTY_KEY_TYP_NM = ITTPRC. PARTY_KEY_IDENTIFIER. PARTY_KEY_TYP_NM OR

    PART_KEY_IDENTIFIER here is a nested table. If you cannot join it like that.

    Try like this

    prkytp.prty_key_typ_nm in (select party_key_typ_nm from table(ittprc.party_key_identifier)) or
    

    Here is an example based on the EMP table.

    I created as a result of nested table.

    SQL> create or replace type my_emp_list as table of number(10)
      2  /
    
    Type created.
    
    SQL> create or replace type my_dept_obj as object(deptno number(10), emp_list my_emp_list)
      2  /
    
    Type created.
    
    SQL> create or replace type my_dept_tbl as table of my_dept_obj
      2  /
    
    Type created.
    

    I'm going to use the data of the table nested within a query to get the value of the emp table

     my_dept_tbl
     (
       my_dept_obj
       (
         10, my_emp_list(1,2,3,4,5)
       ),
       my_dept_obj
       (
         20, my_emp_list(6,7,8,9)
       )
     )
    

    The query would be like this

    SQL> select e.*
      2    from emp e
      3    join table
      4         (
      5           my_dept_tbl
      6           (
      7             my_dept_obj
      8             (
      9               10, my_emp_list(7839,7782)
     10             ),
     11             my_dept_obj
     12             (
     13               20, my_emp_list(7566,7369)
     14             )
     15           )
     16         ) t
     17      on e.deptno = t.deptno
     18     and e.empno in (select column_value from table(t.emp_list))
     19  /
    
         EMPNO ENAME  JOB              MGR HIREDATE         SAL        COM     DEPTNO
    ---------- ------ --------- ---------- --------- ---------- ---------- ----------
          7839 KING   PRESIDENT            17-NOV-81       5000          0         10
          7782 CLARK  MANAGER         7839 09-JUN-81       2450          0         10
          7566 JONES  MANAGER         7839 02-APR-81       2975          0         20
          7369 SMITH  CLERK           7902 02-APR-81       2975          0         20
    
    SQL> 
    
  • How to pass the value of the element from one form to another form?

    Hi all

    I need your help to complete this task.
    I have a form page named reserve form.i have some five fields selection list in the form of reserve, after I chose the first value from the selection list, I create a button in the form of reserve, when I click on the button create, it will open another form page named set form in this form page , I have a field selected, the list of values in configure the form depends on the values selected as a reserve, it means that I have to change the value of page of a form to another form.

    Please suggest a solution, how to pass the value?

    Thank you
    Robette.

    Check out the button create on Page 8.

    In the Action when the button is clicked, the configuration is

    The value of these P35_IT_PRODUCT
    With these values & P8_IT_PRODUCT.

    Kind regards

Maybe you are looking for