IOS 7 Spoke to Spoke VPN

Hi Dave,

You may want to investigate Cisco PIX Security Appliance Release Notes Version 7.0(1)

Virtual Private Networking (VPN) Services

Enhanced Spoke-to-Spoke VPN Support

Version 7.0(1) improves support for spoke-to-spoke (and client-to-client) VPN communications, by providing the ability for encrypted traffic to enter and leave the same interface. Furthermore, split-tunnel remote access connections can now be terminated on the outside interface for the security appliance, allowing Internet-destined traffic from remote access user VPN tunnels to leave on the same interface as it arrived (after firewall rules have been applied).

The same-security-traffic command permits traffic to enter and exit the same interface when used with the intra-interface keyword enabling spoke-to-spoke VPN support. For more information, see the " Permitting Intra-Interface Traffic" section in the in the Cisco Security Appliance Command Line Configuration Guide.

Hope this helps.

Brad Reese BradReese.Com Cisco Repair Service Experts

1293 Hendersonville Road, Suite 17 Asheville, North Carolina USA 28803 U.S. Toll Free: 877-549-2680 International: 828-277-7272 Website:

Cheers Brad,

It sounds like it would work using the command

same-security-traffic permit intra-interface

But would that allow traffic from a VPN client and a Site-Site VPN?

Would it work if I gave my VPN Clients the same IP Range as my VPN Tunnel on the Site-Site?

Dave