Re:

If I'm reading correctly, there are 3 sites involved. Originally, two sites, but now there is a 3rd site. Do you have a single hub site (say site 1) that works to the original site (call it site 2), but site 3?

This sounds like a UTurn-VPN issue caused most likely by a missing command.

Permit same security-traffic intra

If I missed your point, my apologies. Please provide more detail.

Also, what IOS are you running as it could be a no-nat issue with 8.3 and higher.

Regards,
Jay McMickle- CCNP,CCSP,CCDP
Sent from iJay

On Apr 11, 2012, at 10:49 AM, Ryan West <rwest_at_zyedge.com> wrote:

> Look at your crypto map, you probably have the dynamic map listed early. You can move it to 65535 to make sure its hit last.
>
> Sent from handheld
>
> On Apr 11, 2012, at 11:42 AM, "Awotona Olusola" <awotona09_at_gmail.com> wrote:
>
>> Hi Experts,
>>
>> i have configure Remote Access VPN on ASA 5510 for all users that need to
>> work directly to an application running at Data Center, its been working
>> perfectly for almost A yr now. but now, there is requirement to have Site
>> to site VPN for my HO to Data Center. i have 5510 ASA on both ends, i have
>> apply normall configuration based on the guildlines but the Site to site is
>> not working. please what am i really doing wrong? or Site to Site can not
>> be terninated on the same outside interface where i have terminated Remote
>> Access vpn? I really need your guidlines. im sure is not issue of licence.
>>
>> Best Regards
>>
>>
>> Blogs and organic groups at http://www.ccie.net
>>
>> _______________________________________________________________________
>> Subscription information may be found at:
>> http://www.groupstudy.com/list/CCIELab.html
>
>
> Blogs and organic groups at http://www.ccie.net
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html

Blogs and organic groups at http://www.ccie.net
Received on Wed Apr 11 2012 - 12:05:44 ART