VPN with static nat!!!

examples20001 · ‎03-19-2007

Hi All,

I configured the VPN between H.O and B.O Cisco ISR router and VPN has come at both end and the tunnel is showing is UP-ACTIVE.

But when I ping the server at B.O, which has been nat`ed at B.O vpn router, the ping is giving request timeout at H.O.

But when I ping the B.O server from B.O router the ping is OK.

The B.O server segment is in another segment which has been NAT`ed at B.O router.

The debbug show what NAT is working properlly and the show ACL couter increases for VPN traffic also, but the ping traffic is always request timeout.

What cab be the problem?

spremkumar · ‎03-19-2007

Hi

Do throw more light on the kinda network topology you have in place out there and the addressing scheme..

if possible do post out a sample network diagram for the same..

regds

examples20001 · ‎03-20-2007

Hi,

I have attached my network topology for H.O and B.O and NAT and VPN tunnel details.

In the B.O side, I have put the 192.1.1.13 behind switch in the diagram, but I dont have much details on it, apart from access to BO Cisco VPN router.

examples20001 · ‎03-20-2007

Hi,

Is the B.O`s route-map and static NAT config correct?

kaachary · ‎03-20-2007

The NAT config looks good. Make sure you have a static route on the switch for L.M.N.0 and P.Q.0.0 subnet pointing to the Router's ip address.

-Kanishka