Hi, I have hub-and-spoke vpn network. The hub is Draytek 2950. Spokes A and B are Draytek 2950. Spoke C is Cisco ASA 5520.
Vpn from each site to hub works fine. Spoke-to-spoke VPN between A and B works fine, by adding subnet A to the remote network list on spoke B, and visa-versa. But spoke A (or B) to Spoke C (cisco) fails.
On spoke A and B, I have added the subnet C to the remote network list. On spoke C, I have added subnets A and B to the acl and the nat acl (similar to other cisco-only spoke-to-spoke setups). But no traffic will pass from spokes A or B to spoke C.
I think some config is needed on hub 2950 to allow traffic for A and B to pass through the VPN to C. Any one know what that config is? Thanks.
