SRX

 View Only
last person joined: yesterday 

Ask questions and share experiences about the SRX Series, vSRX, and cSRX.
  • 1.  Routing Between Remote Sites

    Posted 02-13-2019 11:00

    I have 3 sites with SRX routers one is at Main site IP10.0.1.0 with 2 remote sites that I am trying to get communtion between. Site RA IP 10.0.2.0 and Site RB 10.0.3.0 can communicate with Main site without problems Site RA has VPN to Main Site RB does not. How do I setup SRX to communicate between the 2 remote sites by going to Main site?

     



  • 2.  RE: Routing Between Remote Sites

    Posted 02-13-2019 15:23

    Hi PHowse

     

    In the scenario you explained, where the remote sites can communicate already with the main site, I think you need to following:

     

    • Site RA:  

    A route for the internal subnets of  Site RB with a next-hop of the Main Site. (I cant tell to what address because I dont know the complete topology nor the configuration on the devices).

     

    • Site RB: 

    A route for the internal subnets of  Site RA with a next-hop of the Main Site. 

     

    • Main site:

    A security-policy allowing traffic from/to the internal subnets of the remote sites. I cant tell the from-zone and to-zone to be configured on the security policy because again I dont know the topology nor your configuration.

     

    If you would like to share some more information I will advise to provide:

     

    • Main site:
      • > show route [RA_site_internal_subnet]
      • > show route [RB_site_internal_subnet]
      • > show security zones
    • RA site:
      • > show route [MAIN_site_internal_subnet]
      • > show route [RA_site_internal_subnet]
      • > show security zones
    • RB site:
      • > show route [MAIN_site_internal_subnet]
      • > show route [RB_site_internal_subnet]
      • > show security zones

     



  • 3.  RE: Routing Between Remote Sites

    Posted 02-13-2019 15:23

    Sound like you just need all three sites to be able to communicate with each other.

     

    If that is the case, the simplest solution is to just create two move site-to-site vpn tunnels.

    One from RB to main

    One from RA to RB

     

    These will be the same setup as your current tunnel just joining up all the remaining links.

     



  • 4.  RE: Routing Between Remote Sites
    Best Answer

    Posted 02-20-2019 10:13

    Figured out the problem. I had to setup traffic selectors at main site.

    Thanks for suggestions.

    Cheers,

    Patrick