topic Inter VPN Routing in SASE and Remote Access

Inter VPN Routing

e016012e-c965-4 — Wed, 05 Dec 2018 21:49:51 GMT

I'm working in a company where we are using a lot of S2S VPNs,

I follow some SKs but didn' found a real solution to my problem, basically :

we are routing traffic between 2 sites with VPNs (we are the HUB:H)

S1-H-S2 (S: Spoke)

S1 : domain based vpn

S2 : Route Based vpn

traffic from S2==>H==>S1 encrypted fwd properly on S1 vpn (no problem)

traffic from S1==>H==>S2 decrypted from S1 to H but not encrypted through S2

try to follow sk116097/sk109340 by adding dst-ip/nated ip on S2 GW doesn't help.

Anyone have an idea/experience same issues.

Thanks in advance for any help

_Val_ — Thu, 06 Dec 2018 09:52:11 GMT

Please do not post in French group in English. Use General Topics instead. Thank you

PhoneBoy — Sun, 09 Dec 2018 15:08:17 GMT

Have you implemented what's described in this SK?

e016012e-c965-4 — Mon, 10 Dec 2018 09:38:23 GMT

hello Dameon Welch-Abernathy‌,
thansk for this SK, but i already check it before bit doesn't apply to my case:

1.I'm not having/encountering subnets overlapping problem.

2.I have different communities for my two remote gateways(above: S1/S2 )

to summarize :
My Route Base traffic isn't matching Domain Based VPN for Source and Destination.

PhoneBoy — Mon, 10 Dec 2018 10:30:28 GMT

Have you opened a TAC case on this?

e016012e-c965-4 — Mon, 10 Dec 2018 12:26:59 GMT

We have to make a support renewal, not yet done.