Need Help With Site-to-Site VPN - VRF?

[JRosario78]

Hi All,

I'm trying to configure a 2611XM to allow 2 VPN connections/tunnels for Site A and Site B. After the traffic for both sites get pass the edge router there is a 3550 switch that is L3 capable.

I would like to have both sites establish a VPN connection to the edge router and be on their own separate network when they hit the switch. The edge router establishing the VPN connections is a 2611XM via SDM I configured the ISO firewall and configured it for Site-to-Site VPN. The router only has 2 interfaces. One facing the outside and one facing the inside the 3550 switch.

The network for Site A is 192.168.1.0 /24
The network for Site B is 10.5.1.0 /24
The network for the inside interface on our router is 172.25.10.0 /27.

I want to avoid Site A and Site B from seeing each other via the 172.25.10.0/27 network.

How should I go about setting this up? Would VRF be the solution? I read up about VRF and VRF-lite but sill a bit confused.

Thanks in advance!

- JR

 

[JRosario78]

UPDATE:

I was told by a co-worker that ACL(s) is all that would be required.

Can someone please let me know what are the ACL(s) that I need to apply so that Site A and Site B do not access each other via the 172.25.10.0 network.

Reason for all this:
There is a server on the 172.25.10.0 network that will monitor the servers and network devices for Site A and Site B. Since they are 2 different companies, they cannot access each other via the 172.25.10.0 network.

Thanks in advance!