hi,
i've created an Ipsec site-to-site VPN witch is working because i can ping computers and servers on the other site.
But when i try to ping from a computer to the other network it is not working at all.
so i think it must be in my routing or acl?
on R2 i use
Interface G0/0 with the ip of 192.168.1.1/24
acl advanced 3101
rule 0 permit ip source 192.168.1.0 0.0.0.255 destination 192.168.0.0 0.0.0.255
ip route-static 192.168.0.0 24 Tunnel0
interface Tunnel0 mode ipv4-ipv4
ip address 1.1.1.1 255.255.255.252
source GigabitEthernet0/1
destination 81..x.x.x
ipsec apply policy policy-R2
on R1
Interface G0/0 with IP 192.168.0.1/24
acl advanced 3101
rule 0 permit ip source 192.168.0.0 0.0.0.255 destination 192.168.1.0 0.0.0.255
ip route-static 192.168.1.0 24 Tunnel0
interface Tunnel0 mode ipv4-ipv4
ip address 1.1.1.2 255.255.255.252
source GigabitEthernet0/1
destination 81.x.x.110
ipsec apply policy policy-R2
I can ping on both sites from my routers:
<R2> ping 192.168.1.2
Ping 192.168.1.2 (192.168.1.2): 56 data bytes, press CTRL_C to break
56 bytes from 192.168.1.2: icmp_seq=0 ttl=128 time=0.680 ms
56 bytes from 192.168.1.2: icmp_seq=1 ttl=128 time=0.556 ms
56 bytes from 192.168.1.2: icmp_seq=2 ttl=128 time=0.621 ms
56 bytes from 192.168.1.2: icmp_seq=3 ttl=128 time=0.556 ms
56 bytes from 192.168.1.2: icmp_seq=4 ttl=128 time=0.592 ms
--- Ping statistics for 192.168.1.2 ---
5 packets transmitted, 5 packets received, 0.0% packet loss
round-trip min/avg/max/std-dev = 0.556/0.601/0.680/0.046 ms
<R2>ping 192.168.0.254
Ping 192.168.0.254 (192.168.0.254): 56 data bytes, press CTRL_C to break
56 bytes from 192.168.0.254: icmp_seq=0 ttl=127 time=17.275 ms
56 bytes from 192.168.0.254: icmp_seq=1 ttl=127 time=19.136 ms
56 bytes from 192.168.0.254: icmp_seq=2 ttl=127 time=19.166 ms
56 bytes from 192.168.0.254: icmp_seq=3 ttl=127 time=18.603 ms
56 bytes from 192.168.0.254: icmp_seq=4 ttl=127 time=15.124 ms
but from my server to the other router:
Pinging 192.168.1.2 with 32 bytes of data:
Request timed out.
Request timed out.
Request timed out.
Request timed out.
Ping statistics for 192.168.1.2:
Packets: Sent = 4, Received = 0, Lost = 4 (100% loss),
Best regards,
Benny
