Allow RED connected network to access Site to Site connection over XG

Question

Good Day, 
 We have a Primary FW with a remote RED Network configured, we also have a site to site connection established with another vendor's FW, this gives us access to their network. 
 What I am trying to achieve is allowing the remote RED network the ability to access the resources that our current LAN users have access to on the site to site connection. I note also that our FW cannot even ping the location the RED network is trying to access. 
 
 Site A - Our LAN (.0 subnet) 
 Site B - Remote RED Network (.6 subnet) 
 Site C - Site to Site Network (.168 subnet) 
 A & B can talk to each other. Similarly A & C can talk to each other. 
 We would like traffic coming into A from B to able see the C network and vise versa ideally. 
 Have played around with a few rules and none of them really done anything. 
 
 If anyone can help would be very much appreciated and thank you in advance.

PhilippRusch · Accepted Answer

Hello, 
 normally you would setup ip routes to "see" networks behind a gateway. In this case, your central firewall in site A is the gateway for the users at site B to go to Site C. 
 As long as you do not have the ability (it sounds like that) to add an additional route at site C, to tell them how they could reach the networks at site B, this won't work. 
 So you could use NAT, to make site C believe, that the packets do come from site A. This would require an SNAT rule.

Allow RED connected network to access Site to Site connection over XG

Top Replies