HPE Community read-only access December 15, 2018
This is a maintenance upgrade. You will be able to read articles and posts, but not post or reply.
Hours:
Dec 15, 4:00 am to 10:00 am UTC
Dec 14, 10:00 pm CST to Dec 15, 4:00 am CST
Dec 14, 8:00 pm PST to Dec 15, 2:00 am PST
Comware Based
cancel
Showing results for 
Search instead for 
Did you mean: 

MSR 2003 VPN not able to ping from devices in the LAN

 
PeoplesProjects
Occasional Advisor

MSR 2003 VPN not able to ping from devices in the LAN

hi,

i've created an Ipsec site-to-site VPN witch is working because i can ping computers and servers on the other site.

But when i try to ping from a computer to the other network it is not working at all.

so i think it must be in my routing or acl?

on R2 i use 

Interface G0/0 with the ip of 192.168.1.1/24

acl advanced 3101

 rule 0 permit ip source 192.168.1.0 0.0.0.255 destination 192.168.0.0 0.0.0.255

ip route-static 192.168.0.0 24 Tunnel0

 

interface Tunnel0 mode ipv4-ipv4

 ip address 1.1.1.1 255.255.255.252

 source GigabitEthernet0/1

 destination 81..x.x.x

 ipsec apply policy policy-R2

 

on R1

Interface G0/0 with IP 192.168.0.1/24

acl advanced 3101

 rule 0 permit ip source 192.168.0.0 0.0.0.255 destination 192.168.1.0 0.0.0.255

 ip route-static 192.168.1.0 24 Tunnel0

interface Tunnel0 mode ipv4-ipv4
ip address 1.1.1.2 255.255.255.252
source GigabitEthernet0/1
destination 81.x.x.110
ipsec apply policy policy-R2

 

I can ping on both sites from my routers:

<R2> ping 192.168.1.2
Ping 192.168.1.2 (192.168.1.2): 56 data bytes, press CTRL_C to break
56 bytes from 192.168.1.2: icmp_seq=0 ttl=128 time=0.680 ms
56 bytes from 192.168.1.2: icmp_seq=1 ttl=128 time=0.556 ms
56 bytes from 192.168.1.2: icmp_seq=2 ttl=128 time=0.621 ms
56 bytes from 192.168.1.2: icmp_seq=3 ttl=128 time=0.556 ms
56 bytes from 192.168.1.2: icmp_seq=4 ttl=128 time=0.592 ms

--- Ping statistics for 192.168.1.2 ---
5 packets transmitted, 5 packets received, 0.0% packet loss
round-trip min/avg/max/std-dev = 0.556/0.601/0.680/0.046 ms
<R2>ping 192.168.0.254
Ping 192.168.0.254 (192.168.0.254): 56 data bytes, press CTRL_C to break
56 bytes from 192.168.0.254: icmp_seq=0 ttl=127 time=17.275 ms
56 bytes from 192.168.0.254: icmp_seq=1 ttl=127 time=19.136 ms
56 bytes from 192.168.0.254: icmp_seq=2 ttl=127 time=19.166 ms
56 bytes from 192.168.0.254: icmp_seq=3 ttl=127 time=18.603 ms
56 bytes from 192.168.0.254: icmp_seq=4 ttl=127 time=15.124 ms

 but from my server to the other router:


Pinging 192.168.1.2 with 32 bytes of data:
Request timed out.
Request timed out.
Request timed out.
Request timed out.

Ping statistics for 192.168.1.2:
Packets: Sent = 4, Received = 0, Lost = 4 (100% loss),

Best regards,

Benny

2 REPLIES
aybra
HPE Pro

Re: MSR 2003 VPN not able to ping from devices in the LAN

Hello Benny

can you please post the complete configurations so we can help you.

best regards

I am an HPE Employee

Accept or Kudo

rajkumar787
HPE Pro

Re: MSR 2003 VPN not able to ping from devices in the LAN

Hi,

Can you share the tracert output from the server/PC.

Thank You!
I am an HPE Employee

-----------------------------------------------------------------------------------
Was the post useful? Click on the white KUDOS! Thumb below. Kudos is a way of saying thank you to the post.