L2L vpn routing help

Question

Hi everybody,
I'm using ASA 5510
I have two inside interfaces
my end
outside:  a.a.a.a
inside1 : b.b.b.b/24
inside2 : c.c.c.c/24
other end
outside: d.d.d.d
inside : e.e.e.e/29
There is tunnel established between b.b.b.b/24 and e.e.e.e/29
I'd like to route the network from c.c.c.c/24 to e.e.e.e/29 and back using the same tunnel.
Is that possible? if so how do I go about it?
Point to those who help me solve this

Answer 1

Aaron
Perhaps I did not understand your requirements as well as I thought that I did. So let me try again, starting from a slightly different perspective. If I get off track with my understanding I hope you will supply appropriate corrections.
What I think I understand is that you have an ASA and that network c.c.c.0 is on the inside of that ASA. You want traffic from c.c.c to go to network e.e.e.0 which is behind some ASA/router device which has a VPN site to site tunnel set up to your ASA to provide connectivity for network b.b.b.0.
The first thing to understand is that a second tunnel is really not an option. Your ASA can certainly support multiple VPN tunnels - as long as they each go to different destinations. But two tunnels from the same ASA to the same destination does not work.
So you basically have two options: your ASA can route traffic from c.c.c out through the outside interface and in the clear trying to get to e.e.e. Depending on whether these are public addresses or private addresses it might work or it might not work. But I do not think that this is the option that you want. The other option is to send that traffic through the existing tunnel. And the way to get that traffic through the existing tunnel is to add c.c.c to the access list. (and there might be a few other things like whether or not to translate the traffic).
There is an aspect to this that you might not realize and perhaps this may help you to feel better about this solution. Right now your ASA negotiates an IPSec Security Association with b.b.b.b as local proxy. If you add c.c.c.c into the tunnel then IPSec will negotiate an additional Security Association with the new SA having c.c.c.c as the local proxy.
HTH
Rick