Re: Traffic from IPSec tunnel to a VLAN
Sorry it took so long to get back on this.
Everything in your last post make sense except the reference to the IPSec to FD1. FD1 has no router, therefore there is no tunnel to FD1. There is however at tunnel from FD2 to the CH router that router also has a VLAN to FD1.
I tried the following but it did not work:
Policy: source interface: ipsec to CH
destination interface: VLAN to FD1
source address: FD1 subnet
destination address: FD2 subnet
I also tried to create another IPSec tunnel from FD2 to CH using the two FD's subnets, but I would not create because there already a tunnel from FD2 to CH.
If I do a tracert on either end the respective routers respond but it goes no further. This is with everything you described in you last reply excpt with the IPSec to CH not FD1.